Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
File: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (raw, json)
Hash identifier: HyDmzwiWOExy2YJsgokVPHZS5Evkr13x2XepJOzvoNk=
Subject key identifier: 73:9B:5D:46:2E:8B:89:DB:F8:A2:EE:27:35:1E:25:5D:3A:F7:BB:C4
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: 02F8
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
Signing time: Tue 24 Dec 2024 17:45:58 +0000
ROA not before: Tue 24 Dec 2024 17:45:58 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 138619
IP address blocks: 103.187.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Dec 24 17:45:58 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=676af356-858a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:45:8f:06:fe:da:e1:ec:eb:cf:65:96:4c:
9a:25:4a:36:bb:a8:a6:62:6b:14:e7:95:b4:09:b2:
20:1b:fc:96:81:ea:1a:3e:74:26:b0:1f:20:11:ad:
69:5c:03:72:44:54:b9:b9:f4:53:f2:49:35:16:59:
1c:64:61:11:d1:7b:6b:dd:66:da:b9:27:e4:07:36:
c6:8a:b8:89:d6:fb:e8:c0:95:78:0c:38:c7:42:a9:
56:d7:d8:80:1c:b2:2d:db:d7:ef:98:0a:a3:d8:3c:
fc:c4:7a:36:6c:c0:80:01:2d:ce:ce:35:91:dd:e4:
c8:1b:92:9c:38:a5:af:48:1a:7f:c3:3e:69:84:43:
2d:ce:6e:41:92:fb:20:bd:0f:d9:c6:64:34:7b:b3:
c1:9d:df:08:4d:97:26:53:00:64:85:5d:1e:f8:53:
f0:2e:c0:bd:d7:0f:70:48:0e:9a:d1:14:0c:02:19:
75:a0:cd:b0:94:3e:c1:c9:54:19:64:c6:bc:ed:f0:
c0:84:18:a9:55:47:81:76:46:1e:a8:1c:25:cd:61:
12:93:1f:d7:60:ba:6b:d0:c3:b3:bb:24:ae:eb:6e:
a6:4c:53:cd:88:12:82:ce:2e:f4:6c:af:ea:6d:68:
30:13:d0:19:16:45:68:48:1e:46:28:13:56:e0:84:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:5D:46:2E:8B:89:DB:F8:A2:EE:27:35:1E:25:5D:3A:F7:BB:C4
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:35:51:a4:78:d2:1c:d2:1e:b4:a3:43:dc:ec:7e:34:d9:20:
50:ec:dc:3f:17:6f:cc:43:b9:58:42:86:2c:71:53:19:09:76:
76:b2:31:b0:81:ee:5b:bf:5d:4b:f1:5b:e9:31:e6:35:38:8e:
98:d4:be:c3:bc:f1:28:2a:fe:7a:70:a8:02:bb:c7:b1:85:8b:
e7:29:95:68:32:38:aa:0e:5d:c6:52:07:a7:6d:b2:dc:11:e5:
b5:bb:59:5d:66:e4:2f:47:a5:9a:f8:98:1a:11:77:c6:c1:8a:
2c:cd:4c:15:1f:3c:59:52:2b:af:b2:aa:9b:cf:2d:42:80:92:
2b:ac:4a:6b:81:19:bd:33:7d:1d:c5:73:b1:13:99:f0:60:8e:
98:8f:a4:e8:8f:0d:63:1f:fc:0d:82:5f:65:c4:f5:fe:ee:02:
a5:9a:b3:d7:85:07:ac:18:f7:a2:09:23:b1:e1:c7:03:9d:7d:
ad:0e:f4:85:7a:b1:93:2d:cf:2b:26:a5:db:d5:82:55:d6:a3:
ca:fb:8f:b5:47:7f:b7:58:92:c1:44:eb:29:08:fb:e8:2a:db:
9d:a8:04:1c:bf:1a:5b:03:65:c3:7c:16:5a:cd:fa:70:9b:0e:
ba:1a:cd:e1:cb:64:a8:ec:9b:38:bd:e8:a2:68:08:38:32:96:
5a:e2:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:10 2025 by rpki-client