Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
File: 9CB879ECC7B511ED9411183FC4F9AE02.roa (raw, json)
Hash identifier: YSCK3SyvL0QhIHXS6YXGQBk1/DrCgOSt2WKrCd8HBC8=
Subject key identifier: FB:3C:44:31:1A:27:D7:32:14:3C:5C:F8:CF:A9:31:44:7B:63:AF:A4
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: F7
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
Signing time: Tue 25 Jun 2024 04:56:41 +0000
ROA not before: Tue 25 Jun 2024 04:56:41 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134346
IP address blocks: 103.60.252.0/24 maxlen: 24
103.60.253.0/24 maxlen: 24
103.60.254.0/24 maxlen: 24
103.60.255.0/24 maxlen: 24
203.57.34.0/24 maxlen: 24
203.57.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Jun 25 04:56:41 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667a4e09-475b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:80:98:bf:3e:ae:7c:bd:92:0f:02:83:86:
55:02:de:38:c2:f4:dd:22:87:a3:69:6e:d5:22:31:
fa:24:eb:1f:07:ee:9c:3f:b6:29:6d:3a:4c:a8:f8:
fd:f4:e6:89:b3:40:b7:33:ac:13:32:c4:9b:3e:a4:
b2:d2:a3:0b:ba:a9:d1:90:d9:a5:36:79:4c:1b:fc:
26:f9:0d:d9:73:2f:15:9b:1b:fe:d6:d7:45:b7:77:
61:d0:c5:fa:85:97:46:50:37:62:b5:1b:41:77:f1:
96:74:c5:cf:84:39:d8:44:c0:b2:eb:2a:2d:bf:21:
ef:15:55:d1:15:0b:74:0b:c2:04:e7:df:4d:fd:fb:
00:dd:1e:96:a3:ba:70:ce:1f:10:4c:5d:11:82:a0:
f2:84:aa:5e:66:31:79:aa:1e:1b:cb:66:4d:4e:03:
52:24:f0:87:ce:93:f9:41:6c:6a:32:3b:ca:a7:7b:
59:82:2e:4c:c8:e7:2f:ac:69:df:5b:77:0b:44:d7:
ac:e4:51:6f:38:82:b3:3d:13:6b:b4:26:21:85:95:
8d:5e:5f:ed:dd:03:7b:87:57:11:e9:6f:dd:76:1d:
20:a5:ad:b0:85:b5:bb:47:74:ef:df:1c:92:21:05:
26:61:90:15:c3:65:9c:75:99:f4:dd:f4:8b:13:03:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:44:31:1A:27:D7:32:14:3C:5C:F8:CF:A9:31:44:7B:63:AF:A4
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/9CB879ECC7B511ED9411183FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.252.0/22
203.57.34.0/23
Signature Algorithm: sha256WithRSAEncryption
01:5a:6a:0f:3f:b1:25:2d:47:9f:ff:1b:57:32:5e:09:59:d5:
81:84:d4:45:90:0a:39:bd:05:36:dd:cb:90:de:f3:4d:55:1c:
6a:ba:06:3e:c7:fc:00:04:64:c5:41:84:d2:92:27:28:e0:52:
29:a7:11:b9:a1:d6:d6:07:f3:9e:fb:74:9c:88:4a:db:c4:15:
e5:e2:3a:24:8d:38:f1:ef:b2:ec:ea:02:6e:d1:eb:a7:55:02:
11:dc:b6:f5:6d:f9:6f:26:c9:47:07:e0:30:da:ab:f9:eb:69:
b7:fe:8e:c1:38:f1:0e:b2:a6:66:a8:9f:7d:96:3d:5a:1c:7a:
b0:05:27:db:d0:43:f8:ab:f6:9e:8b:99:65:d8:3f:f9:36:9d:
51:d9:a2:91:09:21:14:c9:1c:04:b3:2d:0d:3f:13:30:14:cb:
61:d8:39:1e:e7:4b:d3:be:9e:f3:8e:5e:22:21:b3:b7:12:14:
cf:23:af:f5:a7:8c:5f:63:60:ef:de:ce:99:1a:65:b4:47:ad:
cd:b0:ab:31:0f:0b:89:a6:16:f3:ce:a8:74:fe:51:ee:23:99:
3b:2f:b2:52:f2:40:b2:02:b3:67:1d:15:ef:25:40:cf:52:d4:
3e:2b:e3:52:14:68:61:ce:18:1b:f7:97:ac:bc:29:31:37:77:
47:d5:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:20 2025 by rpki-client