Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
File: 933D446C0BCA11ED888E5616C4F9AE02.roa (raw, json)
Hash identifier: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=
Subject key identifier: 27:BB:0A:3F:69:7C:CE:6C:03:54:28:3E:09:3D:A1:D5:C3:EC:85:95
Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial: 0201
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
Signing time: Thu 11 Jul 2024 03:35:11 +0000
ROA not before: Thu 11 Jul 2024 03:35:11 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137831
IP address blocks: 103.115.76.0/22 maxlen: 22
103.115.79.0/24 maxlen: 24
202.181.92.0/22 maxlen: 22
202.181.93.0/24 maxlen: 24
202.181.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Validity
Not Before: Jul 11 03:35:11 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668f52ef-11b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:74:c0:9f:26:b5:fa:c7:6f:b3:0b:5a:37:
20:6c:4e:30:80:98:a4:da:94:08:ed:ac:a3:ab:07:
ca:bd:6c:31:ca:11:4d:b9:09:a1:29:af:9a:19:ba:
78:56:15:b4:1e:9a:38:b3:84:72:35:01:f6:ca:b4:
a6:8d:6f:bd:42:c6:77:6e:23:50:07:97:aa:a0:29:
98:54:4b:81:f3:58:92:67:5d:58:35:a2:0b:51:46:
ed:5a:44:bd:a4:85:86:aa:e1:ce:46:e2:1c:ce:bb:
4f:b7:bd:c2:1e:aa:a2:31:bf:04:67:6f:91:d6:91:
fe:12:69:bb:21:63:db:84:f3:02:19:9b:2a:dc:fd:
48:e5:94:f4:9b:8d:74:21:31:36:34:25:aa:e5:53:
72:40:9b:bd:ae:db:64:a9:d6:39:a9:f2:6c:37:8b:
f8:89:04:bf:8a:44:b6:48:63:2f:21:c9:bd:bb:6d:
01:b2:15:43:e9:f5:fd:98:d0:52:78:1d:9e:41:8d:
42:5b:10:b2:9c:4c:ef:5e:51:c4:28:06:f8:bc:94:
79:d8:47:a2:b8:cf:46:7e:8b:62:9f:65:bf:8b:e8:
ec:99:eb:f5:55:a8:03:79:cf:05:d5:fb:da:33:27:
55:d3:08:ab:c3:b7:06:d4:a2:0e:77:ec:65:df:a5:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:0A:3F:69:7C:CE:6C:03:54:28:3E:09:3D:A1:D5:C3:EC:85:95
X509v3 Authority Key Identifier:
keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.76.0/22
202.181.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:9e:85:5c:a2:fb:48:c6:25:af:32:3d:35:83:76:e6:ad:75:
fa:d4:b5:ad:2a:01:bd:80:40:1e:26:80:03:f9:4e:32:b1:35:
f3:26:ff:82:e9:c4:0e:81:a6:32:b3:f8:06:05:a1:fa:69:01:
13:67:63:99:09:c8:84:90:b1:86:ad:65:3b:a0:eb:7e:8d:f4:
c7:48:26:ad:cf:23:2b:5c:73:bf:36:d1:a5:62:5f:79:37:e1:
f0:e0:ec:33:f1:d7:f9:9e:44:b6:ad:50:a6:19:3f:e3:d6:d3:
56:7b:b7:56:06:75:2c:0b:9f:e2:3f:8c:62:e7:33:a4:14:6a:
1f:6c:d7:5b:d9:87:14:2a:37:f0:7d:dd:81:04:ba:76:db:11:
9e:cc:c1:27:9c:fb:0b:04:42:82:91:69:e0:d8:aa:66:82:52:
88:41:5b:bd:77:57:04:46:02:40:91:f1:54:2f:67:df:12:9f:
4b:9a:13:6d:78:3f:3a:88:59:44:14:c9:24:2f:67:91:2f:13:
ce:c1:af:b2:2b:c1:5a:70:4f:09:72:88:de:27:04:64:02:8f:
c4:00:e3:ef:37:32:24:49:07:40:9a:a4:0e:7f:f9:ff:e8:7a:
33:46:ec:5f:10:b8:9d:52:94:0d:e0:b4:3e:f4:ba:9e:d8:62:
2c:65:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:04 2025 by rpki-client