Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
File: 0B237586453311ED9A3F7844C4F9AE02.roa (raw, json)
Hash identifier: mEyvOlDX3kJHouKS9DLhCAJ43welizBv5m5kUTWRzII=
Subject key identifier: 58:B5:47:A9:76:BB:EC:2C:31:EE:1B:1A:A2:83:A5:D4:CA:3D:16:C0
Certificate issuer: /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Certificate serial: 0181
Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
Signing time: Fri 11 Oct 2024 02:36:16 +0000
ROA not before: Fri 11 Oct 2024 02:36:16 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150336
IP address blocks: 103.15.212.0/23 maxlen: 23
103.15.212.0/24 maxlen: 24
103.15.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Validity
Not Before: Oct 11 02:36:16 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67088f1f-003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:52:82:b8:1c:fb:a0:47:f1:37:4a:58:12:
2c:ca:3d:cd:a5:ac:15:8a:31:2c:1a:9e:e9:07:87:
cd:de:37:f8:cc:89:66:ff:6b:e9:53:87:c2:4c:f9:
26:14:e4:66:c7:37:5b:3f:56:40:2d:22:d0:16:2a:
3e:60:e2:c9:b9:64:d6:9c:ae:c8:86:39:52:da:28:
cc:09:1e:d8:59:08:01:18:57:5c:bd:55:b2:39:04:
86:6c:c9:06:ad:cb:90:30:d9:45:ca:ae:38:c3:29:
69:1d:82:80:74:04:ac:66:ac:cf:96:3c:f5:d0:95:
69:a9:8f:76:28:ef:9e:76:af:d9:eb:c6:4b:be:ed:
bb:aa:e3:c7:c1:89:0f:d3:da:9b:82:5a:c1:ac:07:
c9:09:70:e0:bd:e2:41:92:ae:00:71:cc:aa:1d:18:
56:84:68:f9:75:d7:56:37:46:b9:43:2f:99:26:5f:
a4:a9:66:de:cb:a6:ed:dc:87:82:c3:1a:ed:97:a5:
c5:da:82:f2:f1:3a:1d:d1:51:b8:bd:c0:1d:62:d3:
2e:ea:45:45:32:be:2b:ba:25:9e:c9:5f:e4:44:5a:
d4:ca:c6:ad:f9:fa:f1:29:c4:86:56:ea:3a:5c:93:
f5:f9:43:0b:f8:67:8d:41:0b:1a:95:c9:88:47:0b:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:47:A9:76:BB:EC:2C:31:EE:1B:1A:A2:83:A5:D4:CA:3D:16:C0
X509v3 Authority Key Identifier:
keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e7:a6:8d:5c:56:4c:02:34:bc:6e:f3:3c:cb:70:1b:a2:51:
59:38:8e:e6:c7:ba:4e:db:1f:3d:3b:f2:f8:24:d9:9e:2e:3d:
f0:12:95:26:e7:d8:3c:4e:d0:95:a6:24:a4:64:24:d5:0e:67:
32:0d:cc:ba:15:1c:a9:aa:60:e7:fc:87:8c:ab:37:fc:6e:18:
25:f5:1b:f5:81:2c:4f:91:f9:bd:5c:38:65:4e:da:0b:d4:28:
77:39:91:e8:a4:20:fd:c9:59:c6:df:82:f4:b9:54:3d:c4:4b:
a6:b0:bc:04:4c:0b:19:ba:91:5e:ea:13:ba:7f:87:8a:c5:c6:
14:2c:6f:dd:96:b5:e5:5a:13:3d:ad:02:7d:a8:19:71:ef:1d:
12:fb:43:db:4e:f9:02:33:07:b1:62:fc:00:91:56:a8:7f:47:
34:98:68:f1:d3:80:de:aa:66:d9:7b:21:41:cd:77:20:41:d0:
de:e7:2e:69:f1:c9:96:71:32:50:8f:20:b4:10:bb:36:3c:cb:
6e:2f:45:fa:60:bb:a8:35:ea:ef:01:75:bc:4f:3b:af:ac:6f:
68:e2:ee:b7:6c:20:52:86:1e:1c:e0:36:6b:ce:02:d1:59:7b:
9e:b1:75:08:25:97:df:56:bd:a1:aa:26:90:c6:36:fa:b9:76:
f4:62:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:00:49 2025 by rpki-client