Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
File: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (raw, json)
Hash identifier: TuAyfKbGRFhHV9G3hUTl+QdiLnDpQyy2p+JhztZaeOo=
Subject key identifier: CC:C4:B3:A8:AC:F2:90:0B:77:C9:F1:E2:A1:6F:7B:FB:9C:48:53:28
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 4F
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
Signing time: Thu 04 Jul 2024 14:14:09 +0000
ROA not before: Thu 04 Jul 2024 14:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 103.111.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: Jul 4 14:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6686ae30-9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:54:6c:c7:54:8e:84:7b:fa:86:2a:6d:dd:
68:78:d6:57:42:73:c4:fe:05:83:ff:bb:4c:a1:43:
cc:1a:b1:89:b5:1a:d7:05:e0:5c:fb:62:87:f5:f5:
6f:6c:b5:63:98:d7:6d:3d:73:51:77:9d:f8:70:dc:
85:2a:25:5a:f8:7f:0b:67:af:12:21:2e:84:ef:65:
b5:41:84:a0:0e:3d:1b:ac:d4:6f:92:05:0e:32:00:
13:82:5c:67:84:1e:83:40:50:07:f3:a0:6a:8a:2a:
97:49:74:53:bf:4f:6d:bd:43:bb:83:5e:67:1b:b8:
fa:9b:05:ed:d7:1b:5d:cd:e4:e8:3a:71:88:a9:8d:
c6:47:ea:7b:dc:ea:1d:30:3d:b4:e0:3d:d4:14:9a:
dd:7c:29:61:71:bb:ef:b0:c5:0c:f7:32:14:5e:50:
33:70:13:da:4f:a7:6f:62:c0:ab:63:84:05:e3:3b:
72:e3:1e:2f:9b:06:20:94:49:74:44:94:7a:a0:85:
90:1d:ca:61:2f:62:1f:f7:f3:72:69:07:2c:32:37:
d6:79:c9:9f:57:e8:2d:0f:3e:e7:3d:58:e6:7c:7e:
69:d4:fe:0c:cb:e1:b8:4f:fd:e0:56:87:c4:28:37:
f5:d9:aa:ff:95:e2:35:87:e8:cb:7e:0d:af:09:1a:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:B3:A8:AC:F2:90:0B:77:C9:F1:E2:A1:6F:7B:FB:9C:48:53:28
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5c:fd:30:bf:fe:4e:94:e4:97:31:ce:69:30:43:83:3a:11:
b6:89:c2:b4:19:54:92:06:2b:10:9b:f3:57:17:2e:f5:53:58:
6f:73:0e:76:05:29:e3:7c:c4:b2:7c:b4:6a:a7:da:8e:58:20:
2c:9a:8f:09:d9:e3:f3:10:bb:ec:19:18:7a:d5:e2:c7:6c:cb:
ed:6d:1a:56:26:0d:96:1b:c1:0e:80:17:d4:ab:84:45:4f:5f:
cb:31:a8:9d:98:fe:55:81:c4:8c:44:66:02:cd:f0:d6:5e:7a:
e7:78:be:a5:9b:f3:5a:96:fc:77:ae:d0:aa:71:84:9f:92:d3:
a5:2b:cd:f2:a5:54:ef:22:54:c3:bf:1b:02:4d:eb:b1:a0:bf:
40:c3:06:69:88:61:78:ad:0f:8e:15:d7:e6:8e:37:20:76:c1:
ee:dc:a7:53:71:cc:f6:ba:5d:2e:b6:c0:c6:f7:9e:dd:e5:b6:
42:64:3c:3d:98:26:2a:2d:b7:9f:2d:cd:77:b9:5e:21:41:d1:
71:23:93:50:4c:fe:e7:6a:9c:ba:cc:e0:53:69:30:12:4d:a8:
ba:95:8f:2c:91:e7:05:3a:2d:f5:08:dc:c6:df:bb:a7:cc:19:
79:df:1b:af:94:3b:ad:d2:16:b6:7f:f7:87:ce:45:5d:20:04:
26:10:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:08 2025 by rpki-client