Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa
File: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (raw, json)
Hash identifier: /+LBjF6lBPLxhQK10OGPQmB3GU8J3/dgM8FRgJhuXxw=
Subject key identifier: 0B:1D:2D:B2:10:8C:A9:92:2A:F0:CD:5D:4D:AE:E6:ED:74:76:0F:B4
Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial: D6
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa
Signing time: Sat 27 Apr 2024 06:20:17 +0000
ROA not before: Sat 27 Apr 2024 06:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150808
IP address blocks: 103.111.4.0/24 maxlen: 24
103.111.5.0/24 maxlen: 24
2400:e9e0::/48 maxlen: 48
2400:e9e0:1::/48 maxlen: 48
2400:e9e0:2::/48 maxlen: 48
2400:e9e0:3::/48 maxlen: 48
2400:e9e0:5::/48 maxlen: 48
2400:e9e0:6::/48 maxlen: 48
2400:e9e0:7::/48 maxlen: 48
2400:e9e0:8::/48 maxlen: 48
2400:e9e0:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Validity
Not Before: Apr 27 06:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662c9920-707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:88:f9:c1:32:21:13:42:68:f5:3a:cd:0b:
3c:53:28:77:25:d6:32:94:3f:40:bc:f4:db:18:2e:
a3:5b:85:4d:fc:cc:5c:35:59:c6:3d:fa:6f:0e:da:
e5:51:ad:99:5b:fd:19:d8:17:66:e4:26:47:c8:99:
7b:8a:6d:e3:e4:78:b1:fe:4f:aa:45:91:09:01:fa:
4e:17:0d:51:e9:f7:e0:08:f6:cb:8a:df:01:dc:82:
af:24:3d:af:6d:8d:c2:79:76:09:90:c0:bc:df:04:
44:b4:90:fb:7d:58:9c:13:bb:5b:37:7b:f5:5c:99:
84:7d:49:20:8c:c1:5f:46:bc:69:f7:7d:a2:69:43:
d3:40:9b:e4:a5:ea:b6:de:0f:c5:44:d4:a5:ff:ed:
9e:2b:ea:01:ae:6f:29:2b:43:e0:49:f2:9e:1c:f3:
32:08:6b:ed:30:62:f1:65:dc:d6:04:a8:cf:41:b2:
62:cc:f1:a0:dd:90:7c:75:6d:1f:0e:58:b1:69:96:
26:6c:b8:a1:e3:9b:76:e3:c2:58:ba:1b:01:08:e3:
2e:8d:91:a0:1b:ba:85:fc:00:14:83:80:97:aa:1f:
05:d9:c8:cd:20:da:19:75:02:c0:75:a3:76:7a:47:
a5:6a:06:d1:ee:f8:d2:59:58:d3:ae:49:54:1f:dc:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:2D:B2:10:8C:A9:92:2A:F0:CD:5D:4D:AE:E6:ED:74:76:0F:B4
X509v3 Authority Key Identifier:
keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.4.0/23
IPv6:
2400:e9e0::/46
2400:e9e0:5::-2400:e9e0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:fe:1e:66:7b:0c:de:17:01:46:8f:92:3b:a1:91:fc:46:c0:
36:b4:a5:00:8c:62:50:2f:2b:ae:96:9b:d4:44:75:f3:61:b4:
47:6a:e6:8c:47:9d:0c:19:ec:86:07:07:c8:b6:e3:ee:26:ec:
15:98:a1:2a:d4:b6:4f:8d:cb:e2:ec:26:bc:f3:87:8b:b4:1e:
ce:02:ba:33:3f:15:f0:a5:6a:8f:cb:b7:e5:32:2d:58:da:13:
0a:56:71:0d:5a:7a:51:df:aa:8b:58:d3:d2:95:7c:4e:eb:21:
a9:a6:66:d5:58:d3:c3:11:dd:1f:1f:74:74:0d:db:1f:5c:3e:
81:ac:fa:d5:82:2e:48:16:6a:e5:77:56:78:6a:1c:48:8d:38:
39:ba:59:25:c9:45:3f:93:de:df:3f:ea:68:2f:31:7c:b7:e1:
2e:d6:d1:98:90:03:03:a4:e3:c6:77:79:fb:47:fd:77:63:98:
45:b1:d5:2a:1e:00:40:b4:77:81:af:76:94:2e:cf:2d:35:3b:
18:6d:e6:4f:e2:51:20:4e:68:af:b1:cf:6c:c8:a0:45:34:2a:
02:11:f8:59:5c:34:99:3e:12:35:74:01:3f:80:77:d5:1f:93:
e7:f2:4d:4e:3a:16:3d:68:03:2a:38:7a:5c:d7:a3:d2:b3:e8:
6d:32:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:51 2025 by rpki-client