Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
File: DA505546B74C11ED916B5A6AC4F9AE02.roa (raw, json)
Hash identifier: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=
Subject key identifier: 73:8A:52:42:71:E6:EA:BF:8D:39:97:4C:83:A3:25:9B:D1:CD:8E:87
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 1209
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
Signing time: Sat 28 Dec 2024 17:14:59 +0000
ROA not before: Sat 28 Dec 2024 17:14:59 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.104.19.0/24 maxlen: 24
116.89.244.0/24 maxlen: 24
2401:fdc0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Validity
Not Before: Dec 28 17:14:59 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67703212-ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:db:57:e2:40:d3:0d:5b:cf:72:28:0b:69:
c0:62:25:f5:0c:db:25:61:97:8c:63:7e:6f:d3:ea:
be:b6:f6:fb:55:03:53:a9:81:8a:64:8b:16:6b:e8:
77:b0:35:36:5b:84:e0:82:93:5d:87:c7:ae:19:f3:
56:58:50:84:70:a9:ef:1f:65:54:cf:54:66:d1:87:
1e:20:1a:3b:1a:84:52:9e:9d:63:9e:85:e6:7f:ff:
02:f7:5f:12:21:95:e0:24:63:95:79:ba:a7:7f:4b:
e2:d7:85:90:64:ac:d3:a7:c4:03:e9:14:d4:00:2b:
9b:7d:6c:ea:d3:c7:5e:6d:b4:96:99:08:67:22:e5:
c0:ac:28:82:d2:5d:57:29:49:33:ea:92:b1:74:fd:
a9:2f:ce:c1:93:10:f6:83:b0:95:25:45:7d:b7:52:
b3:34:d0:80:7f:a7:2a:f8:19:89:ff:34:0f:30:05:
18:b2:ec:9f:a6:46:da:37:0d:e4:68:2e:e4:28:4b:
44:ed:ca:1e:b7:2a:29:74:0e:e2:e2:3a:df:0d:6a:
46:5a:0c:9e:50:79:cc:8a:eb:cf:20:ea:5b:dd:71:
0e:6d:70:ad:ec:53:07:33:f5:c7:b7:57:00:2b:18:
fd:90:95:bc:41:22:8d:9b:30:80:c9:2e:a0:4c:ff:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:52:42:71:E6:EA:BF:8D:39:97:4C:83:A3:25:9B:D1:CD:8E:87
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.19.0/24
116.89.244.0/24
IPv6:
2401:fdc0::/44
Signature Algorithm: sha256WithRSAEncryption
87:27:31:09:6a:47:7a:14:95:86:d7:a1:22:5f:e1:14:fa:f8:
02:ab:10:cf:8d:d1:28:09:17:5a:bf:6a:62:b3:27:63:8b:2d:
07:9a:da:60:59:89:68:11:3d:46:a3:fb:4d:d7:b1:fe:01:09:
75:dc:c0:36:c4:c9:cd:64:40:56:be:c8:d1:20:45:19:f5:ba:
71:72:80:b6:64:42:a7:16:fe:c3:83:ae:c5:82:81:9a:5a:95:
f6:4d:4c:38:74:71:2b:94:9e:e4:7e:ce:98:ba:60:48:4f:60:
56:7b:34:44:a8:22:61:b7:f4:42:c1:61:b3:c4:6d:3b:00:c0:
6a:56:9b:a3:bf:08:cf:d1:e9:de:ed:10:3e:24:df:d8:b4:39:
ef:c9:b4:2f:8b:11:94:5e:f0:9b:1e:11:47:83:02:bf:98:a6:
4c:c1:35:52:41:e1:d7:8d:88:da:59:9c:69:cf:ff:ca:12:ec:
29:3e:fe:4c:bd:d0:56:6a:8f:e2:6a:2b:4d:18:b5:e1:b3:2a:
34:08:87:a1:cb:9e:f5:94:0e:ac:9d:13:86:f3:47:39:db:fa:
c7:3c:14:e1:2f:1e:e2:53:8a:08:ce:06:8a:06:ca:a2:29:ce:
bf:54:d4:06:45:b8:83:b3:91:a3:a1:b2:b8:f2:c2:67:69:8a:
5f:2f:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:09:33 2025 by rpki-client