Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa
File: EC1244C40C0A11EF86081F2FC4F9AE02.roa (raw, json)
Hash identifier: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=
Subject key identifier: 2A:96:30:5F:BE:C1:7D:F4:42:96:C9:15:22:C4:70:09:49:ED:DD:36
Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial: 2D
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa
Signing time: Tue 23 Jul 2024 07:28:45 +0000
ROA not before: Tue 23 Jul 2024 07:28:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151847
IP address blocks: 103.168.172.0/24 maxlen: 24
202.12.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Validity
Not Before: Jul 23 07:28:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=669f5bad-be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:17:b0:16:bf:d5:2f:5c:5c:6c:2e:27:8f:
0c:82:22:ec:09:23:0f:88:26:5d:6d:cc:47:ea:bd:
e1:44:a2:6e:3f:fb:84:af:5c:5c:84:60:19:de:4f:
c8:5f:04:13:88:15:e0:a7:6b:95:97:7c:ec:c3:d1:
e2:17:85:6e:a5:3b:a2:5f:05:9a:dd:19:e9:1a:9a:
bb:fb:da:f7:a8:9e:81:68:94:47:c3:39:48:cf:b5:
47:46:bd:1a:54:d8:39:6e:1b:07:07:9c:0c:8b:5b:
1a:e1:fa:b1:eb:1d:9a:cf:e9:39:8f:02:59:53:e9:
42:52:b1:2a:df:a2:ef:da:b7:83:e6:fb:af:f8:64:
07:88:b6:d1:a5:cf:47:71:83:26:70:e6:30:d8:21:
ce:fd:d4:11:5a:c4:32:60:d8:b5:72:41:0f:55:b8:
0c:8a:a2:9b:04:f7:24:e5:11:42:2c:6c:fa:4c:33:
01:8c:8a:3c:03:e4:43:c4:db:b3:25:b9:06:43:7b:
32:9f:d6:fc:38:33:b0:cf:a5:92:87:80:2b:cd:d8:
66:85:88:55:f2:bd:0f:6c:a5:88:51:b3:ac:e2:c0:
30:24:0e:31:3c:79:32:6c:fc:96:f4:4f:ac:49:31:
e0:9d:aa:d3:a6:27:ba:f9:0c:0b:e1:5b:26:8e:cc:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:30:5F:BE:C1:7D:F4:42:96:C9:15:22:C4:70:09:49:ED:DD:36
X509v3 Authority Key Identifier:
keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.172.0/24
202.12.124.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2f:6f:cf:66:41:a3:85:d1:9e:34:7f:1e:e0:05:c1:ac:34:
a3:83:30:c9:91:50:af:b8:fe:f6:48:71:ac:c4:3d:17:9d:ee:
23:8e:1e:12:68:63:ba:aa:5c:74:ed:db:fe:6c:b2:09:35:49:
1e:cb:07:24:d7:5d:ab:6a:e8:bf:e3:b8:51:16:68:b1:aa:34:
52:4f:b5:92:cd:07:92:5f:9b:27:3d:f7:55:b7:54:c0:03:0c:
e6:9d:0c:1d:90:49:67:e0:20:d3:b1:a5:73:e8:62:5f:e0:e9:
b1:44:83:5c:21:52:99:f9:c3:7d:c2:b6:e7:5a:9d:43:28:29:
ac:12:8e:21:c4:2b:0a:09:f4:f5:b7:b8:47:c2:0c:89:c2:76:
1d:9f:b0:5d:68:f5:0b:6e:da:7d:79:bf:71:c4:59:2b:9f:c5:
68:8f:2d:a0:2a:e0:36:5a:3b:7e:f2:11:36:a4:2a:c3:58:b0:
e5:07:0c:77:93:8f:ff:2c:97:a1:46:c3:2a:c4:8c:26:5e:02:
53:8c:3b:25:45:2d:1c:3a:32:e1:0b:ca:ff:7a:12:fc:2f:a5:
3c:5b:9c:7b:38:5b:c1:06:30:44:96:61:82:6c:0e:a4:0d:d6:
bc:9e:bb:e0:1f:ab:cf:69:49:e6:f3:37:4b:a5:9e:d5:4d:48:
6f:e4:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:14 2025 by rpki-client