Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
File: E747F80C6AA411EDB76B7A36C4F9AE02.roa (raw, json)
Hash identifier: dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=
Subject key identifier: 0A:1D:A7:4D:0E:FA:B4:89:CC:D2:35:F0:79:91:25:4E:BF:35:A1:AF
Certificate issuer: /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Certificate serial: 02C5
Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
Signing time: Wed 15 May 2024 03:37:50 +0000
ROA not before: Wed 15 May 2024 03:37:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138336
IP address blocks: 103.184.24.0/24 maxlen: 24
103.184.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Validity
Not Before: May 15 03:37:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66442e0d-3144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:9f:ba:56:87:b6:a8:7b:50:72:46:7f:83:
3c:34:5f:83:a1:e7:0a:cc:99:45:72:33:d9:d2:15:
4a:82:69:65:dc:23:4d:c8:23:84:8a:29:64:5d:54:
33:b9:fb:b2:0b:e9:25:85:1b:fc:87:ad:e9:14:d3:
29:77:fe:6c:5f:6e:3c:a9:ce:0d:7f:db:0d:64:91:
fa:a5:33:15:20:62:dc:cc:05:f1:5e:87:b9:ed:33:
b8:fd:b1:c2:8a:9c:ef:58:e0:82:07:88:34:fe:70:
bb:5b:66:22:7f:2a:6e:42:4f:80:2d:c0:1f:87:90:
92:ac:36:d9:e4:45:b5:90:01:e7:22:db:16:59:98:
24:50:ce:05:0f:53:9e:a8:f3:55:e6:a6:e6:a9:29:
f3:ad:55:63:5b:22:2b:65:7b:e3:5e:ea:a9:04:ed:
53:e2:52:8f:e9:29:ef:19:f2:d1:7a:3a:d6:1c:95:
04:0d:98:80:62:e6:9a:54:11:63:e1:7e:08:eb:5f:
82:25:98:2e:cc:48:7a:4c:f1:d2:2d:7f:25:f9:71:
da:b7:6e:7e:37:92:61:a9:8d:64:2b:38:0a:97:bc:
62:f4:69:b7:a2:51:cd:87:46:87:7c:1a:56:5e:0a:
07:59:cc:81:bc:87:58:9a:ff:50:6f:6f:b7:08:92:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:A7:4D:0E:FA:B4:89:CC:D2:35:F0:79:91:25:4E:BF:35:A1:AF
X509v3 Authority Key Identifier:
keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.24.0/23
Signature Algorithm: sha256WithRSAEncryption
29:54:ea:60:92:2a:36:5f:4b:4d:b2:9e:2c:6d:b2:24:72:65:
1b:be:e6:e0:2d:59:92:13:36:86:eb:2d:c6:30:d6:2c:e6:6d:
cc:72:3c:1a:7f:b9:8f:04:a0:c3:bd:69:f2:04:fb:65:79:50:
94:8a:e2:60:e7:48:55:30:18:b4:57:ef:f3:9a:41:d1:68:ed:
e6:e0:53:df:68:eb:0d:3c:1c:0b:6b:1d:fe:50:4b:24:3a:e0:
3e:36:20:75:83:51:36:4c:47:0e:69:ab:eb:da:8c:2f:f4:74:
18:06:87:3e:20:a5:6e:f4:98:ec:8c:c0:54:53:94:f1:04:17:
66:25:08:d2:87:e7:a4:36:6c:3d:dc:2c:92:6e:3e:29:56:83:
79:66:96:37:32:6d:20:77:f9:61:01:f8:80:11:c6:7d:ab:aa:
bc:31:a3:88:ff:47:16:6a:64:45:f7:65:e9:82:30:88:87:4b:
b9:5e:a3:1c:95:a1:e6:61:92:8c:c9:ea:a0:b3:8f:8c:9d:6b:
44:f0:01:3f:f5:8d:51:9a:7d:b4:d1:f8:b5:6f:e5:90:1e:f1:
e2:fe:ea:b8:1c:ef:21:09:65:fc:2f:2c:6d:99:c9:62:6a:ea:
30:e6:c5:77:55:8e:79:e5:3b:03:ea:27:f7:41:46:dd:24:07:
db:50:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:47 2025 by rpki-client