Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
File: 9816AE202ED111EF9B668069C4F9AE02.roa (raw, json)
Hash identifier: H7tL4KJE0pVl8ulAcyEMhzXfQVRbRczv7arveo6DHyw=
Subject key identifier: 48:CE:88:8E:B4:D3:FB:4B:E3:A5:B6:C4:F5:A9:BA:26:8B:33:21:A4
Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial: 0156
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
Signing time: Wed 01 Jan 2025 02:55:44 +0000
ROA not before: Wed 01 Jan 2025 02:55:44 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 207083
IP address blocks: 103.219.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Validity
Not Before: Jan 1 02:55:44 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6774aeb0-5d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:41:7a:95:88:b7:5b:3e:2d:62:a2:27:5e:
14:cd:5c:cf:16:fc:65:11:51:b2:ea:9d:b5:1a:e1:
e2:59:15:90:c0:50:1a:93:b9:0d:d1:d4:40:65:8d:
ac:b1:23:8a:4b:af:62:66:bd:19:a3:2c:b8:ac:87:
31:f8:fa:88:d7:56:2a:fd:5f:21:6f:b3:13:e1:8c:
0d:fa:65:1e:1d:a3:3f:ca:08:9c:99:9a:0a:97:32:
c2:cd:50:65:fd:c6:78:f4:ed:e2:33:64:8e:0f:f5:
24:2d:a9:20:8f:2b:f5:16:bf:86:59:df:67:55:f4:
65:23:37:ec:ac:95:40:1f:d9:61:11:2d:de:6d:53:
08:82:30:c7:af:42:f5:8b:5e:26:29:d2:48:73:a6:
90:08:95:5e:35:76:0c:fb:08:d4:be:5e:fb:98:2d:
86:2d:d3:93:9c:c6:9f:f6:05:34:c0:96:0e:28:a1:
d8:a6:76:3a:64:3f:8a:7f:97:1e:ab:d5:2d:d6:c1:
2f:b7:53:5f:dd:61:b1:9b:c6:3d:5e:05:53:64:47:
10:85:1a:3f:47:61:97:6e:2f:ef:33:a0:9d:45:67:
df:4c:e3:ae:36:3f:0d:c6:fe:22:15:d0:71:b7:e2:
aa:26:de:1c:30:fa:23:e5:30:92:bb:dd:6f:3d:f0:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:88:8E:B4:D3:FB:4B:E3:A5:B6:C4:F5:A9:BA:26:8B:33:21:A4
X509v3 Authority Key Identifier:
keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/9816AE202ED111EF9B668069C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.152.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f6:8d:35:89:67:07:37:69:22:6d:6d:f8:f4:44:1b:5f:56:
49:4a:b7:08:58:b6:e5:cd:06:48:fb:70:e5:3c:3a:69:f5:8c:
be:16:52:bc:0d:9c:71:68:b7:8d:75:a6:37:0f:44:fa:69:f7:
14:2a:5f:7d:93:52:2c:b1:92:64:93:26:3c:b1:68:3d:87:ac:
ae:54:3c:28:e9:e4:ec:9d:2f:7d:f4:a8:b4:30:d8:53:91:5d:
96:68:51:00:b3:7e:ca:63:ea:74:c4:f5:15:ae:b3:61:76:a4:
0b:73:0b:77:ab:c4:ee:47:f0:d3:82:c6:73:4d:79:8f:8b:71:
fc:f4:08:89:1b:a8:29:2d:72:f9:73:f8:5f:f5:c0:b2:68:b7:
6e:93:39:e1:b6:e9:48:58:fc:31:95:d1:c7:37:85:fa:7d:a1:
61:fd:29:f1:fc:48:5c:fa:80:e8:10:33:1c:92:c6:9c:8d:80:
38:e1:db:30:c3:fa:8a:a4:8c:66:01:dd:48:13:03:ba:28:e3:
13:96:18:c9:f1:1a:1d:2c:d5:83:85:e4:2d:56:b6:5f:8c:ce:
e3:10:83:26:cc:82:d0:d5:ad:af:a3:96:b8:c6:3a:db:5a:cd:
be:d4:33:cf:0e:47:94:3c:03:bd:0c:b5:b8:d4:24:4e:31:44:
b0:19:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:23:34 2025 by rpki-client