Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
File: DE95A942581611EE878B2E54C4F9AE02.roa (raw, json)
Hash identifier: 2edhdcxDL3hq/Y/5irWUYjIM2MnhCjcG113R+cVIiMY=
Subject key identifier: DF:20:65:91:56:71:9B:95:4F:E4:26:42:C8:48:51:6E:3A:ED:D1:13
Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial: 1D30
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
Signing time: Thu 18 Jul 2024 16:33:27 +0000
ROA not before: Thu 18 Jul 2024 16:33:27 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135408
IP address blocks: 103.217.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7472 (0x1d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Validity
Not Before: Jul 18 16:33:27 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=669943d6-5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:da:0f:8d:1f:ca:89:10:11:89:66:62:58:
cd:11:22:30:38:2d:61:e4:f3:76:b9:a9:f1:56:44:
8d:4d:38:28:90:65:a6:7f:e7:fd:0b:f2:61:e0:87:
3a:cb:83:73:ff:c2:e6:4b:6b:7e:2d:f7:94:08:bb:
97:21:18:8b:38:45:3d:46:8b:aa:30:29:bb:17:8c:
1b:af:e4:13:c6:69:fc:72:be:56:f6:6c:72:b6:b1:
51:a5:12:f1:75:5a:f3:79:50:78:d2:db:96:dc:e8:
52:32:98:26:c2:d7:c6:1f:bf:a0:6b:4c:67:8a:47:
f1:d1:22:b4:1e:14:1d:63:19:2c:95:67:67:6a:6f:
64:0a:6a:f3:d4:8c:3d:78:68:ea:0c:08:50:f7:d4:
44:ca:1a:5f:c4:db:86:c4:27:2c:28:9e:73:7d:ae:
4e:8b:5d:74:03:f0:24:8d:fc:68:22:ba:d1:13:93:
35:bc:0c:1d:04:5b:6a:e3:34:28:e7:d3:97:45:1f:
15:50:4b:4a:82:46:7a:ed:03:4d:35:14:17:5b:7d:
66:09:c8:a7:a0:bc:f8:ce:4b:3e:7c:6f:3f:1d:bf:
14:44:24:89:94:32:df:b6:6f:4a:14:98:e3:91:04:
b5:93:9b:74:ca:53:1f:a2:2e:26:31:61:64:21:44:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:65:91:56:71:9B:95:4F:E4:26:42:C8:48:51:6E:3A:ED:D1:13
X509v3 Authority Key Identifier:
keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:48:b5:87:cf:7e:8b:d4:c5:30:87:10:4f:4a:8b:91:1f:a6:
4a:17:39:fb:92:62:f7:3a:a9:20:69:75:13:ec:10:e4:82:22:
d7:71:fc:a1:04:0d:fa:34:0f:db:99:20:0e:d3:27:25:4b:c2:
93:c6:8a:3b:9d:70:f6:2e:c7:ee:21:b4:d8:b9:68:c8:36:ea:
30:24:c9:41:ee:a4:8e:07:68:4e:0c:6b:a7:ad:50:da:f5:76:
d9:2a:85:8e:dd:87:94:ed:d0:ed:5f:93:45:6d:62:6f:1e:2e:
56:43:c2:06:39:b4:5a:84:52:ae:06:6a:e7:6b:83:4c:a5:e8:
e3:9b:38:ae:02:c9:82:a1:b7:a8:95:31:a8:ab:94:b7:4d:e5:
71:77:d1:67:c6:d2:80:07:47:ab:c7:2a:60:3b:90:4c:bf:d4:
b5:ab:99:dc:af:c1:2f:67:80:be:f9:d5:43:05:60:f4:a1:d3:
13:c7:65:58:6a:3f:10:b9:61:b5:52:fb:91:3f:56:54:07:b7:
de:30:c9:8d:d3:24:f6:40:eb:77:54:5a:7b:7f:ba:e2:4e:66:
3e:13:cb:10:b2:8f:17:f6:b5:47:79:45:3d:60:df:e1:9e:e3:
34:4f:c6:b3:e9:93:f6:88:b0:a5:3a:91:cd:4e:48:16:fe:4b:
2b:f7:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:21:20 2025 by rpki-client