Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
File: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (raw, json)
Hash identifier: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=
Subject key identifier: 6A:54:3D:41:3B:4D:6D:D6:1E:33:AD:81:1F:97:6C:27:40:44:18:8A
Certificate issuer: /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial: 0825
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
Signing time: Tue 14 Jan 2025 20:39:15 +0000
ROA not before: Tue 14 Jan 2025 20:39:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 51747
IP address blocks: 103.146.80.0/23 maxlen: 23
103.146.80.0/24 maxlen: 24
103.146.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Validity
Not Before: Jan 14 20:39:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6786cb73-ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:fb:7c:3f:2b:50:29:be:b2:6a:83:0b:a4:
e1:e3:5b:86:c5:5e:01:b6:5c:87:f1:ce:63:10:5a:
e6:a8:51:2a:fd:89:68:bb:ad:39:64:3d:b9:94:32:
be:60:7f:ee:80:bc:dd:85:8f:a4:0c:6b:23:9e:05:
6f:b0:74:ff:12:68:37:0a:69:8f:3f:a4:50:69:6f:
ef:c0:ad:99:a1:ab:cb:3d:37:29:1e:cf:87:09:95:
5c:09:67:5f:c8:b1:44:19:ba:42:7f:e5:5f:c7:4c:
10:d1:cc:e1:9e:6c:ad:e2:ff:43:5a:cc:90:1f:d2:
c7:a8:58:dd:05:60:33:8c:6d:6e:e5:f3:58:5e:03:
87:43:bd:3b:56:42:7e:42:a0:d5:04:0b:51:90:42:
7a:f1:d5:fa:17:46:d0:f8:01:38:b5:cb:ce:f7:54:
21:14:40:8c:d2:97:26:62:04:c6:35:ca:a6:aa:9f:
3b:70:e9:d3:c1:c1:fd:88:5c:04:71:9b:53:d0:21:
ec:ed:aa:65:9d:fc:4d:f5:8a:07:86:3a:d4:8d:db:
df:6a:3d:05:53:29:c1:68:56:28:0e:fa:d8:3f:f6:
ad:e2:eb:36:7a:72:e7:1e:7c:f4:d4:08:8c:66:0e:
2a:77:ed:7d:d2:43:35:8c:92:b1:5b:8f:ca:2f:57:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:3D:41:3B:4D:6D:D6:1E:33:AD:81:1F:97:6C:27:40:44:18:8A
X509v3 Authority Key Identifier:
keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/5EFDF18AC6A111EA988EB242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.80.0/23
Signature Algorithm: sha256WithRSAEncryption
77:78:53:55:a6:5e:68:0f:2e:cb:8c:89:27:0f:9a:74:18:65:
b4:8a:ab:a2:c8:4f:41:54:16:10:a4:ac:dd:ee:e2:1b:e5:5d:
6d:b1:e3:84:bd:5f:a9:7b:6e:a7:48:06:c5:63:fd:37:ab:91:
0c:5f:78:50:79:60:81:cc:d8:4c:ed:d6:14:b7:24:d2:38:89:
35:e6:28:65:dd:e8:08:b9:b0:6b:83:b8:9d:08:2a:3a:82:1f:
61:9a:84:0c:55:bc:3d:0e:c4:25:84:bc:58:78:b9:ea:04:90:
4a:a8:91:be:c7:eb:59:a3:9c:b6:6e:73:d0:2b:9b:c4:2f:26:
74:de:be:dd:ad:b6:c0:c8:75:30:26:09:ac:af:8a:f6:a2:7d:
6f:c1:14:da:37:24:39:5d:3a:9a:ef:c8:75:87:b5:e8:df:dc:
4f:ca:5a:b5:ae:27:d3:66:e6:0e:ed:25:0f:63:9d:c8:46:9d:
45:07:26:12:40:ad:5d:34:16:8c:b4:d1:c6:3b:73:3f:b6:ab:
f7:df:12:18:d1:83:e6:0d:92:0d:6a:e3:e8:38:68:4f:00:0b:
49:74:bd:b0:97:83:59:b2:d2:4b:3d:6c:3a:42:00:68:4c:ec:
fb:e9:6b:0f:51:21:36:91:f8:d2:13:aa:5a:c9:dc:5f:b7:23:
a5:f0:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:52 2025 by rpki-client