Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa
File: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (raw, json)
Hash identifier: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=
Subject key identifier: A9:6C:78:91:54:0D:D7:D0:F3:84:19:E7:6A:77:D8:BF:C7:CF:F0:10
Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial: 1B8A
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa
Signing time: Wed 04 Sep 2024 16:53:37 +0000
ROA not before: Wed 04 Sep 2024 16:53:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135516
IP address blocks: 103.5.212.0/23 maxlen: 23
103.192.175.0/24 maxlen: 24
103.214.207.0/24 maxlen: 24
192.140.226.0/23 maxlen: 23
192.140.226.0/24 maxlen: 24
192.140.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7050 (0x1b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Validity
Not Before: Sep 4 16:53:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d89090-662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:4d:1f:4e:f6:06:66:29:fb:3e:c3:57:fe:
75:29:cc:05:fa:10:78:56:aa:b0:7d:b4:93:92:cf:
f8:f9:a2:0c:b4:34:c2:09:62:c0:39:3d:de:75:47:
cf:50:3f:80:54:e1:0d:7f:f5:ac:e5:ff:8a:ac:1a:
2f:63:8e:f1:09:ee:f5:2c:54:c1:e9:a3:2e:7d:f1:
39:a4:8e:5a:38:18:c0:c3:24:eb:0b:cb:ba:66:b9:
64:25:c7:15:a7:94:76:1e:8c:a4:1a:44:0e:45:fb:
ea:b9:7f:74:4d:6f:37:e5:4b:55:4f:3d:07:df:c1:
39:2a:ef:d8:ad:40:5d:56:d2:53:79:c7:de:07:93:
0d:d9:0d:c6:46:a8:8a:15:48:69:a2:b6:30:c5:a5:
1d:99:cf:2c:41:3c:e9:b6:1b:27:41:93:d5:69:44:
96:d9:dd:3c:1a:00:7b:44:8b:80:f3:aa:b8:0e:96:
c5:42:cd:47:86:33:1a:12:55:a6:c3:59:43:2e:0f:
a0:e1:17:0e:03:de:43:13:3e:c4:44:13:81:e6:27:
dd:50:5d:31:ee:cb:63:f6:b0:77:16:78:c3:ea:63:
d2:0c:92:89:0f:91:f1:e4:5d:a0:20:2a:94:05:9f:
15:4f:fb:5e:a3:4a:b1:58:0a:de:58:0e:bb:43:4c:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:78:91:54:0D:D7:D0:F3:84:19:E7:6A:77:D8:BF:C7:CF:F0:10
X509v3 Authority Key Identifier:
keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/433FBBECF1A511E6BE0A844EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.212.0/23
103.192.175.0/24
103.214.207.0/24
192.140.226.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ca:a9:f9:08:6a:30:28:06:8f:9a:9f:69:7f:56:ae:08:a5:
f3:97:b0:5d:c5:45:4a:ae:19:9d:52:31:61:46:43:3e:c7:41:
ba:2c:a4:83:6b:d9:70:44:88:fd:75:6a:23:c7:de:33:8e:36:
4f:fe:5c:23:ce:88:5a:8d:54:6c:59:b6:f2:5a:79:30:68:fb:
67:f5:3f:54:40:8a:11:18:4e:6b:9f:16:29:de:f8:f4:c3:7b:
94:a4:32:a9:a8:e0:5b:73:8b:8f:71:32:32:9b:a5:4d:31:a9:
fd:c0:b9:92:0d:6f:46:34:a0:1a:9b:8e:43:ec:d5:82:a6:05:
3c:c3:f8:9b:89:6a:f5:d6:8e:06:52:fd:21:f9:e5:be:c8:ab:
0d:c1:8f:42:cb:60:28:cc:26:10:3e:bc:8d:a3:bf:ee:5f:3e:
50:8d:20:56:f6:73:d3:79:c4:0c:70:a8:a7:0f:2f:5e:66:91:
48:6b:35:53:ad:93:6a:14:11:0e:86:a3:2c:5a:68:03:e5:04:
8f:a3:9a:41:0d:71:83:c4:29:3e:36:95:83:0f:70:4a:16:b2:
64:83:86:74:d5:72:08:e5:be:11:dd:0d:2a:e2:a9:63:0e:6f:
86:fb:3a:0c:8a:39:7a:2b:70:9c:08:f4:28:6f:00:1b:18:b1:
64:fa:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:51 2025 by rpki-client