Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
File: A6550254216E11EF88CCA84FC4F9AE02.roa (raw, json)
Hash identifier: Xxazta9JKV8B8yAhbbqo5YU38N15x+XY1UclZ16kOdg=
Subject key identifier: A0:52:1C:74:73:CD:E1:06:4D:F2:A1:DC:10:BA:7D:FD:AF:6A:CD:07
Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial: 69
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
Signing time: Tue 03 Dec 2024 06:00:37 +0000
ROA not before: Tue 03 Dec 2024 06:00:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.44.109.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
203.28.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Validity
Not Before: Dec 3 06:00:37 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=674e9e84-d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:29:fa:b5:bd:be:0e:d2:fb:d8:00:4a:bb:
79:81:41:9b:dc:6d:d8:6b:c0:1b:2f:71:b6:0b:1f:
43:9c:1e:ce:c4:40:74:2e:b7:06:f7:de:34:b9:e6:
bc:be:de:4b:5d:3b:88:58:32:3e:e2:a4:ac:b7:70:
31:8e:d2:42:19:bf:80:05:5f:f6:ae:59:a4:ce:5a:
3d:28:dc:73:9c:97:ca:07:28:bf:23:20:d2:f4:ee:
b8:b2:e3:c6:ea:2e:26:be:9f:74:b7:42:1d:c8:b8:
11:72:15:ff:4e:fe:b6:e8:6c:f0:a1:75:74:da:36:
9d:07:33:5a:66:e3:da:dc:93:17:26:7f:47:ed:cb:
76:a5:b4:7f:ee:f5:49:1c:9b:3b:68:af:22:4d:3e:
67:0c:17:3d:59:e1:5f:28:57:51:a7:44:04:67:eb:
79:86:f3:47:32:c3:e6:14:dd:e5:c5:57:0f:12:29:
76:75:d7:fb:75:7f:48:56:ff:13:14:c9:8c:2d:a5:
7c:97:dd:39:ca:8f:88:05:46:cc:71:62:18:97:35:
b0:df:7a:d7:51:58:03:3c:97:0b:22:0c:13:97:d9:
9e:3b:c4:ab:ec:89:04:8e:00:4f:e9:eb:90:1b:d0:
18:95:a2:92:55:6f:c3:29:40:95:56:fe:55:b3:55:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:1C:74:73:CD:E1:06:4D:F2:A1:DC:10:BA:7D:FD:AF:6A:CD:07
X509v3 Authority Key Identifier:
keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/A6550254216E11EF88CCA84FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.109.0/24
117.18.103.0/24
203.28.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3b:32:a8:a1:c4:da:11:31:e3:ac:79:ed:49:ed:8d:2d:e5:
67:a7:89:ec:58:de:58:0a:bd:74:a5:ae:ef:83:36:f9:f3:a9:
e7:04:ad:a4:1b:2a:4d:de:7a:0a:65:0b:4a:63:2d:04:46:be:
0f:c8:b6:c6:bd:4f:a5:98:4b:fe:f6:bb:81:20:d9:7b:58:29:
1c:ea:f2:b0:0b:f2:be:2d:1a:ee:a8:b6:96:32:9b:47:26:c6:
b9:48:c0:92:bb:0a:85:4e:40:48:88:28:63:73:22:f7:5c:17:
ef:88:22:18:4a:af:5e:54:72:00:72:c8:57:e0:6c:72:1d:0e:
ee:27:5b:fd:2c:1f:15:4e:8a:c8:03:42:3f:48:57:a3:25:4e:
21:16:72:94:4b:25:ad:43:90:41:b2:06:48:a1:cb:80:f6:0f:
5d:db:b5:f5:7e:b6:49:21:54:a4:ac:3d:36:a7:5e:e2:ea:04:
23:77:5f:d1:83:aa:b7:f9:d8:72:d1:9a:12:8d:5b:35:8b:cc:
ef:57:c6:30:41:c8:8f:9b:4b:0b:b3:3e:5f:42:8d:bb:e7:f9:
96:c9:17:e4:cc:67:fc:fe:28:bc:32:e8:52:be:3f:e8:74:87:
6a:49:31:64:da:df:f0:47:91:2f:c8:e3:dc:52:7b:29:6b:ab:
3d:de:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:46 2025 by rpki-client