Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
File: AC21E1E8924411EE96AA9544C4F9AE02.roa (raw, json)
Hash identifier: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o=
Subject key identifier: D7:E3:B2:E8:83:09:76:86:F6:B2:03:E8:7C:B0:E4:F6:B4:8C:1F:47
Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial: A0
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
Signing time: Thu 03 Oct 2024 05:09:15 +0000
ROA not before: Thu 03 Oct 2024 05:09:15 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 151649
IP address blocks: 103.249.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Validity
Not Before: Oct 3 05:09:15 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fe26fa-127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:10:ae:fc:71:cf:96:33:ee:33:0d:e7:43:
1a:25:19:48:4e:c2:0e:47:4a:c1:6b:c1:72:95:28:
fd:c3:42:1f:64:4e:e8:35:52:b9:f3:8d:5b:f8:9d:
fb:ef:7d:c5:6a:63:82:7e:ad:8c:a5:bf:ac:a1:84:
b1:61:aa:8c:7d:2c:cc:4a:07:e2:59:c5:7f:7d:1d:
ca:38:4a:76:31:be:81:33:85:66:bc:1f:4d:1d:5e:
40:8f:28:a3:a3:3a:13:0e:00:24:39:a2:aa:40:10:
2f:c6:7d:eb:a4:69:dd:b5:ea:21:56:52:80:c1:61:
54:45:9b:cc:df:7b:3b:65:3a:ba:f4:26:64:fd:99:
ab:8c:dc:98:ba:a1:2a:e6:96:46:6a:40:8c:f7:4e:
36:53:d5:4b:82:fe:2b:91:33:7a:f8:60:88:a6:6b:
b9:9d:75:9b:8b:94:16:46:e5:05:80:3e:95:ec:fa:
f2:ba:0c:7c:1a:8d:d4:0a:44:2a:1f:1e:92:72:4d:
ba:ee:cc:35:00:27:1f:ae:8a:15:72:96:11:f5:ff:
8f:c8:27:30:33:27:00:c4:48:3a:79:8e:49:3b:a7:
0a:55:7a:4b:bc:76:cb:7b:7b:76:ac:09:07:ef:43:
e2:94:12:67:66:c4:98:06:90:b9:c2:8e:97:e1:17:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:B2:E8:83:09:76:86:F6:B2:03:E8:7C:B0:E4:F6:B4:8C:1F:47
X509v3 Authority Key Identifier:
keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fc:a2:9c:50:48:08:b5:c3:22:a9:a2:d6:41:87:17:88:47:
44:a1:a8:65:b3:8a:34:3e:c0:1b:4e:32:d8:12:c3:04:dc:62:
96:2b:8e:0f:42:61:80:cd:c6:25:9a:d2:f5:31:3b:9f:fa:d9:
3e:67:81:16:91:f4:5d:b0:da:24:5d:6b:4c:5a:ed:c8:10:2d:
0f:be:68:21:4f:e5:70:4c:1b:da:2a:27:5b:c0:52:02:1c:c2:
8a:44:6c:09:dc:9c:36:9d:f4:54:15:d0:0e:48:ee:5c:2c:48:
9e:79:70:ff:1b:bf:77:ed:b0:0e:e1:23:3d:ec:6c:0f:9a:e3:
12:32:55:16:be:4c:dd:b4:c5:bb:ba:18:24:84:e0:7e:5a:33:
70:e6:4a:16:dd:9a:da:82:51:8f:b1:cb:09:cd:57:75:d5:e2:
9d:d1:59:09:57:f5:84:b9:e5:8e:1a:3c:7d:a1:52:d4:2b:94:
15:01:72:61:2c:d1:1b:62:cd:4f:03:96:02:3b:14:c6:a7:ca:
83:88:e1:42:11:87:ec:21:fe:3a:2a:25:b1:8a:1a:61:60:be:
c1:66:57:94:d7:91:cb:21:e4:9a:bf:2e:89:ec:2b:2d:3d:36:
41:24:41:ea:5f:d3:67:c2:90:4a:a1:9c:19:11:64:0d:83:42:
8c:95:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:43 2025 by rpki-client