Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
File: A2A3D38A05CE11EA80526530C4F9AE02.roa (raw, json)
Hash identifier: 5qzdMRlHADmRGjRZ80Eu6WYWmObO/9cRl46Cear7KnU=
Subject key identifier: EF:47:6F:61:3A:7F:C3:70:73:51:71:B0:A9:70:AA:22:62:BC:5B:0B
Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial: 0B9C
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
Signing time: Tue 02 Jul 2024 19:26:42 +0000
ROA not before: Tue 02 Jul 2024 19:26:42 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137911
IP address blocks: 103.117.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Validity
Not Before: Jul 2 19:26:42 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66845472-589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:bc:23:5a:02:f3:f3:7f:9d:12:18:72:36:
27:f2:1c:bb:f3:98:a2:8e:e6:e5:08:ca:30:7d:36:
ce:3a:05:fb:ef:17:dd:6b:27:9c:6b:e7:89:12:8c:
99:3d:75:e7:5d:93:84:5b:cd:3d:28:8a:34:46:cd:
ad:f0:38:53:e4:9b:09:32:a5:60:90:75:70:cc:7a:
f2:dc:35:c6:e1:bc:0e:59:c0:d8:6a:89:46:30:94:
fc:24:3e:d5:05:ad:3e:3b:46:e8:e5:04:ff:6e:70:
4b:9e:ac:b2:3a:51:5a:4d:d2:7c:e5:f2:63:d1:6e:
4a:fc:49:9a:9b:2b:fe:f7:16:a7:92:96:47:8e:1d:
ad:45:b6:58:af:c7:d3:34:19:71:81:e1:0b:de:59:
3b:2c:54:b9:8b:80:93:e2:4f:d7:ac:77:97:12:5f:
97:b3:33:4d:b0:b9:67:7a:d5:ed:ae:67:38:85:6e:
23:d1:e6:bb:3c:30:0b:fc:72:be:f1:d8:2b:9d:7a:
cb:a9:e7:d5:c2:77:04:d9:32:87:5f:57:9e:8b:be:
cc:37:e5:e8:8f:f0:b3:08:08:f6:ed:63:b0:0c:bb:
7b:48:41:3c:c7:c8:ae:78:82:02:9d:52:67:97:3e:
22:70:cc:4f:18:18:96:36:95:41:10:cc:92:5f:17:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:6F:61:3A:7F:C3:70:73:51:71:B0:A9:70:AA:22:62:BC:5B:0B
X509v3 Authority Key Identifier:
keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/A2A3D38A05CE11EA80526530C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:c7:cf:53:f7:70:a5:d6:35:de:a2:aa:9a:68:22:fc:02:
36:48:30:de:a0:09:7c:12:7b:95:73:81:96:53:28:3d:0d:1e:
e2:a6:17:25:b9:2f:20:ce:6e:cb:c1:4f:aa:a8:a0:cb:d7:ef:
5a:c5:a0:43:fb:05:62:a2:56:45:9b:52:03:1d:75:2e:32:51:
8f:61:2c:c6:75:06:5a:de:c5:82:39:e9:67:45:88:3a:10:bb:
76:04:03:65:fb:af:90:87:23:a1:c6:63:bf:e1:7b:40:3f:87:
d4:b5:4e:be:79:80:f7:64:82:42:b0:ef:90:f6:e7:25:b5:13:
b4:98:83:e0:6b:04:49:21:73:28:66:6c:02:37:eb:1f:cd:2d:
5e:55:36:19:98:d1:f3:4a:bd:e5:fb:cd:09:71:fb:88:e9:84:
31:9a:78:25:88:be:d9:17:4f:54:51:9c:88:fb:c7:96:32:8e:
a3:54:9c:74:81:69:16:b9:96:91:43:59:cd:6e:50:9e:99:13:
44:24:0a:e3:e8:ca:57:1d:e1:be:bb:a6:02:9f:10:2a:ba:6e:
28:16:91:47:54:77:c8:0d:c0:dc:16:90:d9:95:c3:ef:1d:d6:
87:0e:1e:9e:47:3b:6e:b5:de:9f:fa:34:b6:cd:d0:e3:3c:2a:
80:59:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:15:18 2025 by rpki-client