Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
File: 335E880A5A1811EFB08E4F38C4F9AE02.roa (raw, json)
Hash identifier: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=
Subject key identifier: 54:67:81:EA:CA:7B:37:3E:3A:5E:AD:09:C7:C5:7A:93:2F:CE:28:D3
Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial: 0E
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
Signing time: Sat 31 Aug 2024 08:49:20 +0000
ROA not before: Sat 31 Aug 2024 08:49:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 26658
IP address blocks: 45.125.108.0/22 maxlen: 22
103.193.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Validity
Not Before: Aug 31 08:49:20 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d2d910-0a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:f6:c6:b3:c7:22:6f:fe:c7:c0:6d:5c:24:
82:52:f2:a2:fa:0a:8a:20:5f:13:04:e4:4f:34:5b:
45:fb:d7:cc:a5:57:5f:bb:25:c4:18:79:33:7f:66:
e5:8c:d1:4d:16:4e:60:00:11:6f:e2:04:91:3b:b2:
1b:5c:f6:b9:9d:66:3f:fe:f8:14:31:b5:71:b7:b1:
17:22:87:c6:eb:87:11:b3:e1:59:91:ef:f0:1e:a1:
e5:13:5a:06:19:a8:85:4c:32:7d:3f:01:a7:c4:e2:
b7:62:ef:cf:b5:2f:5b:a8:a7:2c:e2:65:f4:59:07:
2e:d4:2a:23:ea:6b:4c:07:8d:4f:87:04:24:0d:04:
1c:b4:ed:43:37:19:c4:97:3c:50:39:cb:e2:b7:de:
19:c7:37:83:d7:bf:06:61:ab:e1:de:dc:6b:2b:8c:
25:a8:77:ab:61:d7:ae:6b:2a:53:2d:8a:3c:bd:8d:
f3:50:18:70:04:61:2e:87:31:15:31:86:de:0e:c3:
70:da:3a:c9:5f:ae:6d:4f:25:60:6a:82:bb:86:d1:
88:9f:76:3f:29:43:f9:28:f2:39:32:35:f6:7e:14:
cc:c9:ec:e5:f5:d5:a5:8f:ba:59:3d:03:a9:52:af:
a0:7d:ad:2c:e4:ce:c3:3b:84:5f:f9:f8:ef:1a:e2:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:81:EA:CA:7B:37:3E:3A:5E:AD:09:C7:C5:7A:93:2F:CE:28:D3
X509v3 Authority Key Identifier:
keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/335E880A5A1811EFB08E4F38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.108.0/22
103.193.244.0/22
Signature Algorithm: sha256WithRSAEncryption
40:d8:14:43:4d:35:fb:20:f4:dd:42:18:5d:30:59:ac:63:3e:
f0:ae:b8:f8:f8:19:dd:ea:c1:f8:e7:bd:96:d1:34:d0:39:a9:
2c:54:ac:b6:aa:a3:7a:5f:77:1a:a5:eb:0f:a9:a4:41:c2:2c:
9c:53:24:a0:c8:9d:9f:18:73:6c:98:ca:14:70:9b:03:79:1b:
bf:56:95:cd:69:18:c0:39:42:53:72:7d:26:c6:df:40:10:e4:
fd:a5:9d:f1:1b:41:4f:34:2f:27:61:92:e0:23:44:09:f9:45:
d5:e8:d1:ce:3f:b1:df:38:df:bb:a3:87:b3:58:0d:65:97:fb:
32:94:2a:db:3e:79:e2:c2:80:49:4c:20:4f:58:83:d4:4a:97:
3c:2e:93:d8:be:e3:a8:80:fd:c9:9e:f9:5c:2e:14:1e:78:d8:
13:18:3c:30:39:d1:92:d4:85:a2:1f:de:61:82:3e:15:a5:c6:
e8:da:b7:2f:e0:df:f0:4c:22:c3:56:dd:28:a3:b1:80:00:35:
48:68:c5:27:33:95:7b:69:80:63:73:dd:42:27:13:e6:36:34:
ef:d9:ee:36:88:b7:35:00:44:11:08:f5:9e:9e:c1:11:55:35:
0d:70:50:ed:ad:7e:86:3c:f8:31:e8:c1:9a:39:4e:08:f7:a9:
7b:01:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:09 2025 by rpki-client