Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
File: A48E2B14A73B11EF9933C14AC4F9AE02.roa (raw, json)
Hash identifier: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=
Subject key identifier: 38:FB:93:FC:E3:42:28:40:DE:3A:49:F7:18:84:12:CC:1D:20:A0:88
Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial: 0265
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
Signing time: Mon 16 Dec 2024 05:52:00 +0000
ROA not before: Mon 16 Dec 2024 05:52:00 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 140269
IP address blocks: 103.191.162.0/24 maxlen: 24
2400:96e0::/32 maxlen: 32
2400:96e0:1000::/36 maxlen: 36
2400:96e0:1000::/40 maxlen: 40
2400:96e0:2000::/40 maxlen: 40
2400:96e0:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Validity
Not Before: Dec 16 05:52:00 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=675fbfff-755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:73:12:51:54:e0:d8:b1:b0:e5:4b:d5:b8:
91:e8:40:a3:84:24:cf:8b:88:e3:18:d5:ad:87:7f:
50:c7:0e:3b:68:a1:ed:47:1d:51:40:ec:14:b7:4f:
5f:3a:18:df:80:7c:b5:1a:b5:d2:b5:57:d8:cb:c2:
cb:96:8f:b8:d9:30:64:d5:6d:5a:af:91:cc:c6:ac:
3f:3e:2e:52:3a:05:a1:7d:62:ac:4c:9d:e6:aa:c0:
2f:b3:64:b8:fe:57:be:6f:04:3f:6b:3b:fc:7b:9f:
cb:96:6d:d2:c3:7c:27:ae:b2:f1:f2:0b:4c:7c:27:
29:6f:91:78:43:9e:ba:47:c5:3c:99:a5:37:cb:57:
2a:04:4b:99:13:ad:80:16:62:10:13:b9:6e:44:3a:
11:50:e1:3a:72:34:98:ef:a4:d1:95:91:00:f5:6f:
e7:c5:4b:d3:e8:3e:d1:28:d2:d9:57:20:c6:90:7b:
4e:72:5b:67:be:c6:ae:ae:c5:d6:23:2b:e6:d9:6e:
f3:32:c8:f2:80:d0:2e:83:c9:c0:05:ed:ab:96:5c:
84:6d:6a:48:d7:34:71:0d:3e:df:c7:fa:a5:6b:09:
1a:1b:ca:b5:1c:cf:2e:b1:31:98:6f:20:d9:69:1e:
a7:03:8f:cc:55:0b:b8:62:ab:cb:4e:15:ba:6c:b2:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:93:FC:E3:42:28:40:DE:3A:49:F7:18:84:12:CC:1D:20:A0:88
X509v3 Authority Key Identifier:
keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.162.0/24
IPv6:
2400:96e0::/32
Signature Algorithm: sha256WithRSAEncryption
19:fc:d8:97:22:14:67:56:e1:f5:5c:6f:3c:76:39:9c:8f:cc:
4c:8c:d2:df:8f:10:e4:b5:7c:0d:23:65:02:e2:32:56:04:55:
32:c5:06:ae:e2:11:52:ef:24:91:3f:ef:db:5e:cd:3c:87:cb:
f0:27:7f:4c:97:cb:c4:92:13:c4:03:61:33:b1:8d:c7:b0:17:
20:9a:ef:97:c8:ef:62:74:04:06:53:74:96:41:e8:6a:60:16:
24:ca:2a:b9:eb:43:f4:a7:e2:61:71:0f:e7:b4:38:28:75:74:
3f:f4:6a:ba:81:af:7a:fe:31:8d:10:af:61:56:1e:b1:9b:61:
7b:f8:3a:3b:19:95:58:6b:04:0d:86:f2:50:40:e3:50:b7:4c:
ea:cf:6f:80:62:e4:22:19:34:04:9c:ab:c3:5e:36:d7:73:bc:
1f:cc:77:d4:ac:77:d8:c2:24:35:d7:d7:a3:83:1c:27:70:a9:
04:2e:01:9d:0f:04:01:e7:f7:19:d7:a9:7d:26:04:b1:f5:ae:
e4:ee:0b:bf:77:48:82:87:93:a0:d5:05:db:f1:b9:d0:02:41:
19:69:65:fe:16:5b:2d:9d:b9:13:d6:69:ee:b7:b2:0d:c4:1e:
f5:dc:67:77:c6:a0:28:ef:d3:01:7a:8d:9b:0f:05:93:32:f3:
4a:19:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:51 2025 by rpki-client