Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
File: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json)
Hash identifier: kRARa+uUzxbZ+NEb5MEJFAdFIet/TAzXthEijJD892g=
Subject key identifier: 64:6C:BD:E8:ED:BD:CF:64:75:0A:E1:A8:CF:48:7F:EC:EB:28:17:CC
Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial: 0A0A
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
Signing time: Mon 22 Apr 2024 20:59:29 +0000
ROA not before: Mon 22 Apr 2024 20:59:29 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140091
IP address blocks: 103.5.120.0/23 maxlen: 23
103.5.120.0/24 maxlen: 24
103.5.121.0/24 maxlen: 24
103.148.104.0/24 maxlen: 24
103.153.202.0/24 maxlen: 24
2001:df2:ce80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570 (0xa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Validity
Not Before: Apr 22 20:59:29 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6626cfb1-cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:39:89:1d:e0:02:3b:a3:cd:1a:08:6a:90:
f5:42:af:91:70:65:ba:0b:3f:25:0a:ca:bb:ee:a8:
70:fc:e3:6f:68:38:47:af:04:04:6f:9b:a7:3a:ac:
db:6f:fd:ee:73:10:90:3b:39:6d:dd:4e:8c:99:58:
af:50:60:69:24:aa:05:9b:d5:ea:82:be:b2:ba:2d:
f5:c4:19:51:6c:62:02:21:4b:7f:af:da:11:93:90:
30:94:01:bb:60:03:ab:5d:37:b1:9d:40:2d:a4:54:
95:11:a9:44:0c:d7:b4:9c:55:d1:d3:d1:1a:f0:68:
11:b5:8b:d5:08:09:47:07:46:7f:ef:a7:76:18:2b:
a8:63:bb:20:19:87:5f:5b:ee:40:25:03:a5:6c:7a:
8a:0b:40:d4:34:4d:3b:43:b0:37:0f:e7:e3:bf:79:
f7:63:f5:1b:00:88:6e:4e:54:63:46:ac:9f:f2:a5:
7f:ff:9b:e3:8f:05:58:ea:da:32:27:8a:a2:4b:64:
43:50:07:ac:1e:fb:11:9c:5b:3c:3b:8e:0d:2a:6f:
12:ca:43:88:e1:17:25:2c:eb:b2:00:89:d0:a7:0f:
62:65:48:7f:da:34:c6:ff:a4:ac:e1:66:d3:2f:d6:
14:2e:6b:eb:34:7e:63:76:d3:0a:37:9b:36:1a:94:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:BD:E8:ED:BD:CF:64:75:0A:E1:A8:CF:48:7F:EC:EB:28:17:CC
X509v3 Authority Key Identifier:
keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.120.0/23
103.148.104.0/24
103.153.202.0/24
IPv6:
2001:df2:ce80::/48
Signature Algorithm: sha256WithRSAEncryption
19:5c:69:3c:20:99:be:4f:1c:8a:7d:9d:f9:2d:87:29:ae:d3:
78:4a:ca:f5:03:1f:63:b3:5b:5c:22:77:3b:1b:4d:c8:08:11:
47:3e:1d:52:bb:d0:fd:93:ad:54:ff:6e:b6:95:61:09:4a:33:
42:47:ef:92:60:fe:17:1b:5e:73:86:37:48:db:e1:fd:3f:74:
cd:15:c1:a5:f1:72:e6:07:85:fe:70:2c:0c:cf:31:b4:ef:8d:
0e:2f:9d:ae:34:c8:31:f4:49:76:85:21:b1:d6:5e:70:60:52:
25:5b:bb:e4:cb:77:48:09:c3:fa:8a:5a:3b:fd:34:00:d4:28:
2c:24:9d:c9:c3:3e:16:e4:05:04:00:56:e4:72:f3:fe:7f:c0:
93:77:5c:a8:05:76:4d:99:fe:4d:37:55:28:ce:e2:aa:08:e5:
e2:2b:6d:4f:cf:16:34:d8:09:44:d1:00:f7:ac:75:43:99:82:
47:ef:f1:de:a7:77:55:bd:e4:c0:de:73:b0:4d:c1:e3:c3:0a:
2a:06:a1:f2:16:f8:33:e8:5b:e6:12:79:d3:45:95:60:d3:1e:
b0:7d:44:1d:f9:86:5d:a5:6e:90:04:e1:71:ea:1d:0a:1c:cb:
57:d0:3e:15:b0:38:91:9a:c6:df:11:b0:19:78:5b:2b:ec:24:
c0:da:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:43 2025 by rpki-client