Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
File: CC636E14FFE011EDA35F8946C4F9AE02.roa (raw, json)
Hash identifier: psus1/4bbucX9THpFB8Hw9SwkUBh/0EUpXDJZVDZZIE=
Subject key identifier: 5C:47:D8:9E:B7:69:CF:9F:09:70:4A:AF:70:32:4D:7A:1B:1C:11:D1
Certificate issuer: /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial: DA
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
Signing time: Mon 18 Mar 2024 07:53:47 +0000
ROA not before: Mon 18 Mar 2024 07:53:47 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 150750
IP address blocks: 103.83.30.0/24 maxlen: 24
103.83.31.0/24 maxlen: 24
2401:8ae0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Validity
Not Before: Mar 18 07:53:47 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65f7f30b-01bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:3b:6f:93:0f:27:d6:f6:b8:39:eb:68:bc:
84:82:ff:a5:4e:3d:75:b8:de:09:b3:74:c9:19:b2:
1a:68:e8:05:dc:1a:a7:d2:17:e2:2c:16:6b:10:09:
7b:63:63:a3:e0:ac:27:69:d7:fc:9a:31:93:ae:67:
6a:8f:bd:ee:3b:40:1c:4a:8a:e2:18:92:92:67:d0:
c7:1b:b8:ca:d8:32:6c:94:2e:7e:b8:7a:de:fc:f2:
54:d0:22:b4:52:6c:0f:4f:17:73:ef:cf:e7:7e:e8:
6d:38:0b:71:5f:6e:ac:87:fe:26:a9:1a:73:0a:31:
71:69:3f:07:9e:f2:cb:9d:21:62:05:e1:38:81:b3:
de:56:36:bb:72:a1:6e:84:8b:4f:2a:f6:b1:d7:76:
b3:34:e1:f4:79:c1:dd:49:6e:14:78:90:05:5a:3f:
23:bf:eb:81:9e:1b:01:12:b1:4e:b5:de:a1:fe:bb:
79:56:1b:74:8a:28:cf:37:02:f0:f7:cb:89:2d:67:
e2:4a:db:b0:7f:9d:b1:ca:11:09:4f:a6:fe:2c:1d:
ba:f4:d7:f5:87:37:28:f5:be:f5:4f:04:9d:3a:9e:
2c:c8:7d:e9:0f:01:d0:37:5c:58:53:35:40:df:fe:
27:79:59:25:c1:b5:2b:05:b9:86:32:94:be:2b:bd:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:D8:9E:B7:69:CF:9F:09:70:4A:AF:70:32:4D:7A:1B:1C:11:D1
X509v3 Authority Key Identifier:
keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/CC636E14FFE011EDA35F8946C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.30.0/23
IPv6:
2401:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:97:87:de:ff:27:57:00:af:4a:fc:1e:11:bb:7a:e1:de:dd:
02:b4:80:c2:cf:c1:d4:25:c4:ee:f4:1b:e6:84:5a:62:73:5d:
dc:68:8d:05:54:7f:ff:b7:cb:30:74:b8:49:a3:4b:9e:4d:a7:
03:c2:e1:00:fa:e4:c3:cc:e4:db:fc:63:b6:ad:41:eb:8d:54:
0d:45:b5:19:1a:6c:ee:c7:10:5c:c6:60:b6:47:8d:da:60:5a:
28:2d:af:9e:74:fc:cf:16:72:8d:d5:36:c3:4b:0e:0f:62:77:
b3:88:52:6d:aa:93:cd:49:81:4f:8a:fa:0b:a5:f3:d6:90:31:
70:8c:4d:30:5f:be:6b:4a:24:2b:29:60:c9:eb:d1:95:1b:bf:
8a:0d:46:40:fd:c4:d1:3d:8b:43:b5:51:5f:bc:e6:12:73:72:
75:d8:46:d7:b0:8c:71:08:8a:d2:26:c2:38:09:16:f0:6c:55:
f3:8d:94:b4:83:56:d6:78:40:71:df:37:56:6b:41:3b:b6:f3:
eb:f0:ea:51:79:36:ec:2b:8b:b4:45:8f:fc:01:1d:67:29:a0:
9f:21:d8:bf:df:5e:da:6d:d3:b2:13:27:e7:05:3c:0e:cf:93:
45:7a:86:21:a0:98:b3:ee:ef:d5:a5:60:ac:f5:a9:b4:81:3a:
db:25:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:48:16 2025 by rpki-client