Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
File: 8BA7C90C87D311EFA398304BC4F9AE02.roa (raw, json)
Hash identifier: vBpfxoCSHAiDI5dQa6+SZX8NNqBXPQcTCiAQRMKgTUI=
Subject key identifier: 9D:03:AF:C7:9D:F0:75:F9:7D:02:71:34:AF:0E:2F:95:3F:AB:D6:B1
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0178
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
Signing time: Fri 31 Jan 2025 03:20:16 +0000
ROA not before: Fri 31 Jan 2025 03:20:16 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 150108
IP address blocks: 103.122.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Validity
Not Before: Jan 31 03:20:16 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c4170-5379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:38:69:ed:a7:cf:9f:33:35:e9:d1:ae:93:
5c:a2:98:30:64:17:a9:42:3c:21:bf:8a:4c:e4:91:
a6:21:48:72:c8:cd:59:dc:46:58:66:50:d6:a2:3c:
eb:43:f7:74:b8:bc:b8:7d:ac:f6:38:57:f5:ec:48:
26:0f:13:29:eb:ac:f4:73:89:f4:2e:9b:46:f0:68:
f0:c5:9b:f2:c4:b9:c6:52:d5:3a:ab:8d:1f:3b:e7:
6f:28:7e:f1:59:50:03:7b:23:74:de:43:d9:4e:5f:
03:9a:f8:f6:01:5d:9d:f2:f5:91:9a:f8:01:03:7a:
a9:aa:2d:be:00:ef:6c:0e:ac:a3:ba:af:e8:91:02:
d5:29:a2:8b:61:c3:4f:0f:86:65:15:8b:4f:b6:9e:
e2:e4:42:19:f7:e1:9c:7b:31:b1:fa:00:e0:a9:c1:
5c:01:5b:c8:fe:bf:14:09:f4:d3:bc:1e:93:a8:0c:
91:53:af:da:24:d1:62:2e:71:35:13:f6:de:67:05:
23:02:20:06:85:37:79:e1:48:ab:3a:1e:5f:a2:5c:
e5:d9:18:59:e4:3b:f1:01:02:b1:87:6d:b3:d4:d6:
f8:99:7f:b7:eb:df:91:ef:e1:ec:29:28:2f:be:8a:
cb:7f:b6:50:f9:b5:e4:9c:7e:29:b2:96:af:29:4f:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:AF:C7:9D:F0:75:F9:7D:02:71:34:AF:0E:2F:95:3F:AB:D6:B1
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/8BA7C90C87D311EFA398304BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e5:56:07:37:bc:b8:39:c7:ab:7e:d0:e3:86:1d:89:57:d7:
40:98:17:d5:1d:37:0a:85:f6:67:93:ff:6e:97:c9:5b:45:dd:
42:96:8c:6b:8e:88:a1:8a:29:7d:c4:c2:ff:35:2a:76:a0:95:
38:dd:50:48:af:30:1e:39:12:77:b9:0b:32:fb:4b:0e:2f:55:
5f:6d:cd:63:92:41:a0:7b:53:e0:f8:60:51:6d:1c:bf:94:7b:
c1:45:d8:12:88:79:e9:a2:01:48:67:15:c4:08:b3:ab:34:54:
af:46:2f:18:fd:be:73:63:b6:2a:56:0d:51:8d:f8:46:db:db:
19:09:3d:e6:4e:7d:a9:74:74:52:ae:72:e7:56:e0:d6:b7:4c:
d6:39:c0:12:a3:d4:3d:4e:c9:b9:ac:69:7d:f4:9c:f6:53:02:
a8:d8:f9:a4:da:0c:5f:a6:40:b9:6b:9e:50:c1:8a:7a:37:5d:
30:1c:de:51:d5:f2:72:7d:c0:ed:63:a9:52:07:15:10:5e:34:
c7:f2:3c:16:2a:ce:ec:4e:59:66:8d:f9:f1:41:36:36:be:b3:
0b:f1:7d:c7:31:f9:42:6b:e4:a8:01:88:08:01:2d:c6:7a:a4:
3e:54:66:a4:98:5a:0b:3f:35:e5:95:5a:75:3b:4e:de:93:cf:
b2:cd:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:03 2025 by rpki-client