Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa
File: 61EE7C6C281211EA881CC32DC4F9AE02.roa (raw, json)
Hash identifier: HvkNMYRpxj5Pjk2b6IdbHOGMu5kf16FTiNfirlOJwkA=
Subject key identifier: FC:F9:58:90:7C:A3:00:14:1A:7C:F1:DF:4E:EE:F4:D5:27:14:05:EF
Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial: 0B21
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa
Signing time: Thu 16 May 2024 20:28:56 +0000
ROA not before: Thu 16 May 2024 20:28:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.229.8.0/24 maxlen: 24
103.229.9.0/24 maxlen: 24
103.229.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Validity
Not Before: May 16 20:28:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66466c88-2938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:f6:3f:2d:29:0d:1b:56:1d:c5:e4:61:5f:
29:8e:4a:8c:ea:a5:34:71:19:e3:43:17:ca:fd:b8:
0a:12:2e:29:de:32:b8:58:cd:60:31:ec:9d:ee:0a:
39:36:a9:05:a3:4d:8a:dd:ea:06:b6:5d:8f:99:a2:
b8:4c:b4:39:52:4b:97:26:0f:f6:24:17:d0:fe:7b:
ca:32:50:38:5e:73:19:a7:fa:f1:34:c5:57:9b:63:
67:9f:c8:4a:66:a2:cd:00:cb:57:4d:51:a6:cd:b1:
5e:36:00:16:3b:7c:d3:1b:2f:27:a7:26:bc:97:4d:
f3:7d:e2:f8:63:2f:d6:b5:ea:5f:41:fd:6d:52:93:
e9:c7:22:8c:b3:31:79:51:31:a1:64:71:be:34:60:
3a:b6:b3:74:d5:0e:e3:ff:0f:6f:92:36:33:89:e3:
1d:8a:f3:6d:06:2a:2f:52:21:22:c3:06:15:43:0a:
58:c8:13:12:70:8a:d4:61:e9:d1:95:a7:a0:c6:03:
e4:f6:40:84:0e:70:98:f7:27:6f:d9:9c:5e:97:c1:
02:72:20:db:19:f8:6d:90:28:9b:ee:1f:65:66:94:
f4:a0:87:73:fe:42:38:a7:09:2e:7f:8d:fc:c2:fa:
76:82:43:a0:2e:6f:7d:06:c3:76:2c:71:e6:7a:93:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:58:90:7C:A3:00:14:1A:7C:F1:DF:4E:EE:F4:D5:27:14:05:EF
X509v3 Authority Key Identifier:
keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.8.0-103.229.10.255
Signature Algorithm: sha256WithRSAEncryption
90:f4:45:0a:58:8b:0a:94:24:26:2c:54:bd:50:48:3b:15:32:
e4:b3:ac:d6:91:24:b9:08:01:97:3a:24:03:88:fb:79:89:ac:
f5:c0:34:ae:86:a6:64:e4:9a:7c:f4:9b:a8:f4:f6:40:42:82:
7c:97:8b:b3:10:b7:dd:dc:d6:43:c3:f9:cf:ab:e9:5d:01:62:
a8:e9:67:b5:06:80:6a:a1:46:11:b9:89:28:06:4d:02:c8:a6:
78:ed:d4:2b:78:f2:c4:97:ad:06:58:59:49:01:33:0c:85:04:
a2:15:60:55:22:76:bc:4b:6d:b2:23:26:8a:33:83:f2:6e:2b:
16:52:28:ef:62:31:73:7f:cc:21:81:dd:db:c4:e8:48:9d:b3:
46:9e:3c:75:58:76:ca:12:f3:be:e2:77:3a:d9:ee:68:32:e3:
d5:38:c7:ff:24:c8:35:ff:7a:94:23:c4:7d:dd:eb:2d:1c:c7:
82:73:cd:1b:87:9c:ad:b1:43:0a:5d:c1:28:26:d0:37:73:d5:
01:01:b8:7d:43:e7:f3:46:18:9f:5c:1c:60:fc:23:f4:7c:83:
55:ec:b2:e4:0b:bd:01:12:e8:a6:a5:39:4a:85:1d:dc:66:36:
59:f6:66:74:96:b3:cc:ff:0a:5c:91:23:39:ea:52:7a:f7:5e:
13:e6:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:49 2025 by rpki-client