Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa
File: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (raw, json)
Hash identifier: W9wbZsWyLLMUAciy2pYbinoqa7dwo2MG+0acBYYiWs4=
Subject key identifier: C5:98:B2:22:2A:8B:A0:7F:32:31:7C:83:70:8C:4D:E4:F6:3D:E3:A9
Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial: 02A8
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa
Signing time: Sat 04 Jan 2025 16:08:10 +0000
ROA not before: Sat 04 Jan 2025 16:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141767
IP address blocks: 103.186.196.0/23 maxlen: 24
2400:74e0::/32 maxlen: 32
2400:74e0::/47 maxlen: 48
2400:74e0:2::/48 maxlen: 48
2400:74e0:3::/48 maxlen: 48
2400:74e0:10::/48 maxlen: 48
2400:74e0:11::/48 maxlen: 48
2400:74e0:12::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Validity
Not Before: Jan 4 16:08:10 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67795cea-8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:05:af:ba:78:32:3c:28:68:75:fc:af:5f:e8:
c8:29:67:44:3d:61:5e:a7:cd:f8:68:30:6b:11:c2:
98:be:5f:83:b0:b2:f3:81:bb:e5:d8:e4:77:d6:11:
06:7f:0b:a3:68:07:67:a7:64:ee:26:87:59:68:aa:
06:c0:6a:4f:b9:43:10:95:bb:ed:f8:59:5b:e9:eb:
ff:b9:1a:b4:ea:22:95:a2:1b:fa:59:ec:25:d1:31:
fa:16:08:98:75:72:54:14:10:0c:a0:a0:d3:3e:0b:
59:b8:36:96:16:9e:e8:5c:a3:40:a9:26:bb:17:9c:
39:90:ad:02:c2:a2:70:4c:75:dd:ca:34:fc:17:9d:
2e:4f:5c:ac:3e:22:56:bc:79:66:db:b8:22:b9:30:
65:d5:52:1f:4b:db:fc:72:f4:2d:35:41:89:57:4b:
b5:27:31:4b:ff:5d:32:1f:b9:c2:20:6e:59:d8:81:
ff:98:9b:b8:84:5f:a4:b3:ea:03:e5:aa:4a:68:40:
00:e4:05:74:13:d9:33:96:c6:fa:8c:23:ba:4c:a3:
61:4c:1e:43:7f:30:bc:4a:52:06:11:3f:3e:56:90:
59:96:08:9e:58:20:92:c2:de:70:c6:62:05:e4:cf:
ac:2a:ec:29:c8:06:9b:49:57:a4:5d:39:62:d8:0a:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:B2:22:2A:8B:A0:7F:32:31:7C:83:70:8C:4D:E4:F6:3D:E3:A9
X509v3 Authority Key Identifier:
keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.196.0/23
IPv6:
2400:74e0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:94:d6:12:6c:93:85:26:43:ae:fc:9b:61:3d:02:7d:0e:60:
96:07:ab:28:1c:78:f5:bd:cc:96:70:2a:d2:82:7f:3d:9c:55:
62:7b:35:d2:43:85:e0:f6:33:19:63:2f:d1:be:19:6e:be:b9:
fa:63:6f:49:48:99:1f:3d:c5:b1:08:47:2c:51:dc:61:eb:e0:
06:f3:71:39:96:0e:94:f9:5a:5e:1a:cb:1e:94:99:41:d3:77:
ab:a2:46:ba:83:c4:f5:62:52:34:6f:36:5e:e7:37:14:35:a5:
2a:4b:5f:19:e5:f7:99:1b:2b:67:a8:cc:63:74:4f:c5:39:f4:
a1:48:0b:db:98:f4:5c:97:01:76:b8:3f:cc:41:48:27:8e:e7:
3a:f7:9b:2a:a0:04:b7:42:90:5f:00:4c:0e:79:86:7d:97:f6:
db:27:5f:38:c5:9d:aa:b8:9d:45:3d:db:67:c7:e0:45:75:8e:
10:d9:3f:30:1e:cc:6c:77:60:3f:a3:91:c0:bf:75:ed:38:55:
29:39:66:b1:5f:2b:35:81:59:80:9e:a6:f9:a7:05:94:47:06:
51:6f:75:e3:6a:b3:62:21:9a:46:45:6c:6b:11:c2:e5:1a:b5:
85:55:58:1e:64:85:3a:f7:ef:ab:bb:05:6d:5d:ff:54:43:09:
48:88:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:25 2025 by rpki-client