Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
File: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (raw, json)
Hash identifier: Pxm4f7x+lDVGmZDDz1zwJyjk4SQINSwd/O+ak1CuE3g=
Subject key identifier: 10:D0:A9:21:28:53:4A:9C:DB:90:2E:3D:F7:E2:30:63:04:85:06:10
Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial: C8
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
Signing time: Fri 07 Jun 2024 07:41:20 +0000
ROA not before: Fri 07 Jun 2024 07:41:20 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 142631
IP address blocks: 103.208.66.0/24 maxlen: 24
103.229.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Validity
Not Before: Jun 7 07:41:20 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6662b9a0-7ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:87:d0:a6:ca:a0:81:7b:54:53:f2:0d:d3:
a2:13:65:48:00:e8:13:7b:c4:4c:80:93:9a:12:18:
45:8b:c6:0c:1a:88:7f:ad:6b:51:de:0d:0a:65:49:
43:c5:2d:af:7c:34:d2:3f:aa:47:bc:89:e4:8e:99:
7a:f2:d4:0f:86:6a:b8:7e:9d:4e:92:c1:98:e1:93:
97:87:34:cb:3a:d6:29:ba:c8:29:00:30:ed:e4:b2:
a7:d0:27:3a:77:d6:a7:c6:5d:79:72:8a:c3:24:0f:
28:0c:91:b9:1e:a4:69:9e:c7:b1:30:ce:ff:41:21:
83:21:90:dc:d3:63:f7:02:7a:1a:f8:cc:0a:b5:8d:
61:4b:ac:81:4e:2d:c9:9d:6b:a0:11:07:4a:1b:77:
30:a7:b3:b1:ea:9a:48:c4:8e:79:cc:1a:86:3b:5f:
a2:06:a4:c7:0d:ef:bf:1a:15:3a:11:76:28:19:f0:
87:59:7c:d4:70:8d:28:39:0b:b7:91:e5:8d:36:e3:
63:d2:e5:88:5d:77:d0:e6:97:45:fa:4e:88:a0:c4:
e2:cc:70:0a:39:67:21:7c:88:2f:24:36:e0:b4:55:
ab:25:b7:cb:73:84:b6:3f:bb:09:49:b9:8b:f0:35:
ff:e4:c2:2d:5a:7c:10:3e:05:67:b1:3e:13:1b:fc:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:A9:21:28:53:4A:9C:DB:90:2E:3D:F7:E2:30:63:04:85:06:10
X509v3 Authority Key Identifier:
keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.66.0/24
103.229.232.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cd:16:bf:84:c7:74:15:e6:e9:32:3e:5f:ac:34:fc:7c:f2:
e2:fb:eb:37:0b:cc:5c:f4:05:b6:f0:b3:2c:78:13:60:84:8e:
c5:57:e6:6e:31:f5:02:96:4a:08:bd:39:ba:0b:4a:7a:0f:5d:
80:df:99:38:4b:61:b9:52:ed:88:c0:65:b5:d3:60:51:dd:ee:
fa:e2:a6:53:b3:9d:89:c9:8d:d6:d4:5d:c2:8e:6e:be:e7:5d:
67:39:0a:3d:fd:e0:53:13:97:88:a8:c5:25:19:3a:4c:ca:5c:
f8:bc:cb:ad:73:8c:46:37:70:b8:e9:88:94:29:ec:7b:9b:ff:
71:c2:fa:b8:b8:d7:a5:1b:b0:19:c6:00:09:48:26:8c:78:5d:
da:25:77:4d:2d:3a:6d:e0:86:c0:80:63:cb:2e:82:f9:ec:98:
05:ba:7b:9c:12:01:be:8c:47:65:63:86:44:98:15:c3:69:6f:
a8:8d:1a:77:27:a4:10:3f:cd:b9:ec:3e:ee:9c:ef:01:f1:e7:
1a:9f:fa:59:e8:0c:be:5b:0a:f5:41:ea:f7:e8:2e:6f:dd:9f:
ee:df:fb:64:44:b6:31:3c:2b:0d:34:73:e0:c8:76:32:4b:44:
b6:5a:4a:a2:e8:b9:9b:2b:6a:09:dd:b6:f5:91:ca:4f:fc:b0:
46:72:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:50:42 2025 by rpki-client