Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
File: 8F1629524FD411EB9F1A0673C4F9AE02.roa (raw, json)
Hash identifier: umfOmYx1C1o3wC/2Ke3RN9zKbrXOV6GEbkjUeV3fdUA=
Subject key identifier: BC:1E:0F:35:AC:B2:DF:D4:EB:F8:22:14:4E:7F:35:0D:9F:8F:E5:93
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 060C
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
Signing time: Fri 22 Mar 2024 23:32:55 +0000
ROA not before: Fri 22 Mar 2024 23:32:55 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 18001
IP address blocks: 103.87.12.0/22 maxlen: 22
116.204.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Mar 22 23:32:55 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65fe1527-8b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:a0:82:7a:61:ad:c2:6b:ce:bf:ac:27:81:
b4:81:48:21:17:ed:a9:a6:45:48:9a:de:aa:65:c3:
92:73:78:1b:7b:e7:a8:aa:ff:d3:e4:ea:12:14:2a:
47:ff:6f:f1:9f:23:28:7c:3f:a7:54:75:0d:91:09:
9c:19:0e:e1:71:88:d0:84:a0:30:a9:12:d7:25:55:
e3:a8:b9:b8:52:b9:f7:da:21:8d:89:50:63:1b:c8:
4e:b3:ff:67:fc:6f:a1:aa:7b:1b:b6:e8:62:a0:e8:
a9:e0:ab:c8:e5:5a:26:b7:4c:9f:2c:41:28:dc:88:
19:f4:58:1b:66:78:6a:e7:ce:8a:f4:35:39:02:d9:
8a:48:cc:c7:1b:1e:29:cf:f9:14:ca:83:e2:23:c1:
7a:f1:a4:40:40:d7:7a:2c:69:9c:7e:66:c6:bf:e1:
a0:14:4b:d6:5d:dd:9c:2f:5c:0e:34:35:5f:56:99:
f3:dc:b4:76:a3:2b:cc:87:70:2e:b1:c5:bb:3b:e8:
a6:7f:11:a3:25:55:29:2d:dd:1c:46:a2:ae:06:68:
d2:8f:d3:e9:53:56:75:58:00:7a:76:79:9a:d9:60:
f6:de:44:67:2a:78:fe:aa:27:1f:2b:c7:b2:57:9e:
bf:e5:cd:5b:a7:3c:d4:3f:4a:d3:8d:84:7a:94:bf:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:0F:35:AC:B2:DF:D4:EB:F8:22:14:4E:7F:35:0D:9F:8F:E5:93
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.12.0/22
116.204.212.0/22
Signature Algorithm: sha256WithRSAEncryption
20:e3:c7:be:19:29:e7:0a:e5:d1:44:69:ce:40:57:7a:da:0b:
a7:50:66:66:28:26:ad:8c:3d:b8:7b:ac:b5:98:3f:4a:b3:07:
a2:28:eb:a7:d3:01:c7:2c:82:75:81:2d:cc:48:49:7b:6d:0c:
b6:4b:79:ae:e4:52:cd:7b:c7:3e:b1:c6:cb:c0:b3:df:e2:77:
99:3a:5a:89:7a:1e:b5:1c:55:ae:1b:80:2b:5e:ef:0a:97:a3:
0e:8c:c3:c9:69:39:0d:ec:01:ef:e6:e8:9d:ab:99:6c:5f:75:
6a:d6:2a:83:e5:17:17:34:59:9a:34:46:65:86:39:8c:8a:ca:
4c:4a:5d:7d:71:80:e2:3f:18:56:a9:c2:ec:ab:b4:47:2e:fc:
b5:5c:41:d2:df:f3:61:60:05:ef:ac:37:80:88:1b:7b:14:1c:
62:f4:e1:a1:d7:1e:1d:2e:cc:da:1b:aa:44:35:d0:7d:d8:03:
34:ce:5c:7c:72:5f:2d:76:d9:c1:50:85:77:0e:dc:a9:67:1f:
77:2e:e3:67:2d:34:b2:bd:58:08:92:a5:cb:14:6f:ac:9f:6d:
23:12:20:e8:d1:b1:49:a5:e1:83:8a:5d:dd:ae:4f:b8:21:5d:
13:0e:3a:8a:40:39:29:17:98:79:5c:2e:8a:12:2d:a8:00:c7:
ca:fd:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:10 2025 by rpki-client