Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
File: 862720F4031611EB9086351AC4F9AE02.roa (raw, json)
Hash identifier: ErpHKuDI9+rV11qWd8vi0WWQUq+2/B16GYuYdN9yvgc=
Subject key identifier: 7C:EB:C3:D8:B5:D5:DC:D9:C4:43:4E:6B:DF:58:B0:5A:5F:77:66:9C
Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial: 0769
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
Signing time: Sat 26 Oct 2024 21:32:37 +0000
ROA not before: Sat 26 Oct 2024 21:32:37 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 63931
IP address blocks: 103.47.246.0/23 maxlen: 24
103.204.104.0/23 maxlen: 24
192.140.248.0/22 maxlen: 24
2402:1280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Validity
Not Before: Oct 26 21:32:37 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=671d5ff5-f46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:ac:de:f2:39:2e:c3:f8:2c:ec:0b:29:d2:
79:78:5e:b5:40:e0:7d:6b:e2:9a:8e:6b:92:3d:7a:
af:09:9d:1b:f3:d4:b1:81:c0:dd:fb:4d:ca:87:98:
73:b0:29:48:35:1c:75:7d:59:47:b2:42:61:3b:a4:
46:64:85:ab:7f:d3:42:d0:11:03:0c:57:6e:5a:0e:
3e:fe:8b:f0:68:61:27:f0:18:34:1d:b1:c0:d2:8b:
45:d7:60:12:ca:6a:fc:f6:04:d9:fc:a6:76:f2:fa:
f1:07:91:ac:80:ee:f3:fc:b0:e1:0e:c5:8e:52:62:
68:16:c8:e4:ba:2b:e7:44:b6:b7:52:76:46:1c:7e:
e1:6a:13:7a:90:69:61:92:40:bc:c8:3b:60:43:eb:
ad:53:3f:27:48:e9:f5:ef:5f:27:09:4d:6b:76:b6:
5c:dc:db:15:e6:b7:9c:21:09:8f:b2:56:60:9d:21:
71:cc:91:b5:88:43:b7:c9:05:95:44:61:ac:16:d5:
e8:9a:9e:2e:07:35:48:81:5a:3a:4f:f2:88:8b:3a:
c3:cb:86:30:94:87:d9:01:91:73:27:33:c7:eb:e8:
fe:1d:84:cf:b5:57:10:de:1e:38:28:8c:9b:20:e9:
ac:ad:24:cd:32:28:24:01:38:db:47:39:a1:91:d4:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:C3:D8:B5:D5:DC:D9:C4:43:4E:6B:DF:58:B0:5A:5F:77:66:9C
X509v3 Authority Key Identifier:
keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/862720F4031611EB9086351AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.47.246.0/23
103.204.104.0/23
192.140.248.0/22
IPv6:
2402:1280::/32
Signature Algorithm: sha256WithRSAEncryption
29:c8:18:ab:60:08:45:57:fb:b0:e8:43:f5:a2:28:7b:7c:cc:
60:8d:5e:33:1b:f6:2e:48:30:14:69:5d:0f:20:a8:2f:41:f1:
67:70:13:26:7f:c1:0a:ac:a5:ff:0c:30:3e:e4:65:9d:e7:2a:
52:d3:fb:86:9a:4b:11:e6:da:41:5e:64:9a:af:47:4a:b7:51:
9f:06:d7:5c:ce:c8:e8:69:c3:c8:28:0c:03:5f:2b:fa:18:9e:
b9:47:10:69:0a:92:bf:1c:e3:eb:28:38:15:98:ae:c5:74:fc:
7f:f1:32:a1:83:c7:e7:53:44:cb:1c:8f:4b:7c:8b:e3:be:e1:
a3:e1:fa:9d:84:cc:36:e7:25:e7:6a:92:4a:d6:2a:24:59:fc:
db:bb:9f:2f:7f:45:50:3e:16:68:9c:69:fe:2f:30:82:35:a7:
a3:3f:29:a9:aa:80:75:c2:aa:51:ca:47:b3:fd:43:4a:bc:6f:
32:b1:4b:e4:89:6e:d9:64:b6:b6:76:a8:c8:f0:9c:8b:4b:eb:
17:05:ee:cf:91:71:0f:56:71:6f:ea:7d:9f:fd:02:39:6f:4b:
23:a0:71:d5:80:94:4b:a6:77:97:6d:ed:56:af:79:2d:bb:24:
da:4d:b5:10:7a:f6:ba:28:57:74:8d:f2:fd:5d:95:55:de:48:
ad:b2:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:48:17 2025 by rpki-client