Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
File: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (raw, json)
Hash identifier: BjnEXUQnM/w5/elkxHxhuklRbVefDC0b1z2jDyjryYY=
Subject key identifier: E2:6A:98:DD:C6:EA:69:1A:21:13:56:C6:BB:03:1A:D1:EF:C9:50:EE
Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial: 0280
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
Signing time: Tue 05 Mar 2024 03:25:24 +0000
ROA not before: Tue 05 Mar 2024 03:25:24 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.107.56.0/24 maxlen: 24
2001:df3:c300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Validity
Not Before: Mar 5 03:25:24 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e690a4-d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:22:68:3a:4d:2f:e6:cf:8c:49:b9:de:47:
b7:65:87:1d:e7:01:73:f4:c4:2b:36:40:11:af:18:
b1:40:92:ea:0b:c1:c7:bf:62:cf:8c:58:47:1b:4b:
ea:aa:03:30:c3:9b:9a:36:6b:81:e7:9f:e9:40:c8:
a2:d7:9f:bd:82:cf:4f:90:d0:38:db:61:5a:0e:f0:
7b:df:7f:bd:f5:4e:b8:21:38:fc:bb:e9:32:8e:72:
be:23:e2:af:6a:13:b6:75:dc:d1:c0:c1:e7:93:ef:
12:a5:31:39:03:ad:6a:ad:69:0f:12:ab:a5:12:00:
f0:4b:6a:6b:72:ba:25:56:c7:cd:22:3d:c8:01:6c:
ba:0c:98:a7:2b:44:36:d8:4f:4f:79:58:20:b7:e8:
4a:03:c3:00:2a:d6:8e:60:26:03:80:be:e1:1a:aa:
09:60:e2:27:de:69:bc:1e:55:dd:87:4d:ad:d5:6b:
73:95:a2:5a:76:60:15:ed:b7:1d:01:1e:ea:85:24:
4c:b2:47:53:79:61:19:10:8c:94:ba:08:12:54:c6:
b6:4d:98:e3:b0:2a:88:0e:b4:fa:d7:67:97:b5:ab:
53:2b:ae:0d:bc:33:87:bf:cd:9a:1b:ff:53:9b:68:
ca:38:ef:ce:05:07:9e:e5:9d:25:d0:6a:8e:48:5f:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:98:DD:C6:EA:69:1A:21:13:56:C6:BB:03:1A:D1:EF:C9:50:EE
X509v3 Authority Key Identifier:
keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/39F3DCDABBB711EC8B27B129C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.56.0/24
IPv6:
2001:df3:c300::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ef:d4:68:bf:4c:06:76:dc:7f:b1:17:e9:01:de:c8:b2:ea:
74:a7:93:1e:f6:8b:8b:fd:62:78:50:99:b2:73:d0:bc:c0:d5:
b2:43:11:0a:a0:4b:6e:55:fc:f5:18:21:b7:ef:60:b1:2c:75:
fc:f7:1e:af:63:6c:dd:d2:29:ae:94:bf:00:23:d7:ca:1f:02:
c8:91:c5:64:3d:8d:fa:16:db:72:79:33:5a:83:39:c7:df:c6:
35:58:e9:c8:7c:8c:1b:73:3a:36:41:13:af:4b:5a:d5:fa:9a:
3f:b7:eb:23:ef:a4:0a:22:16:0b:18:a3:ce:69:28:69:21:e0:
80:4a:c0:66:08:3e:ec:c8:d1:6f:db:17:e7:3b:40:2f:6a:ca:
79:a6:8c:fe:9f:54:ba:88:fe:3f:b7:e6:a9:26:9f:2c:95:15:
dd:b8:99:2b:24:3f:b9:59:58:05:db:b2:62:6f:06:40:60:15:
db:17:e0:12:5c:9c:46:67:8e:cf:9e:d3:36:fc:91:66:44:0e:
46:08:14:09:6f:0c:10:7e:5b:08:69:9b:f3:cf:f0:c4:13:43:
ef:fc:fa:b9:67:9d:8f:5d:f1:ad:b6:18:d5:4c:28:ac:54:61:
68:58:34:dc:f4:5b:94:f7:32:5d:41:90:2f:de:4c:55:ed:99:
cd:a7:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:23 2025 by rpki-client