Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
File: DCD00D5E337311EE808C9F28C4F9AE02.roa (raw, json)
Hash identifier: d6rkm10TzoaiNUUwMf0My64SWmjNl3Fcf7m+ZtnSOAE=
Subject key identifier: 4B:93:23:31:D0:D7:2A:57:EB:55:1E:04:59:03:FF:8C:6D:32:6B:56
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0179
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
Signing time: Fri 31 Jan 2025 03:20:17 +0000
ROA not before: Fri 31 Jan 2025 03:20:17 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 24499
IP address blocks: 103.122.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Validity
Not Before: Jan 31 03:20:17 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c4171-dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:d6:2e:2d:54:73:56:83:d2:3a:63:38:5c:
d0:f5:86:d0:0c:75:dd:68:00:c7:f0:2f:8b:7f:10:
f5:92:25:ff:9b:c7:0f:19:6c:f9:72:96:65:3e:35:
d7:02:89:a7:e9:be:92:e2:53:78:05:66:9a:9a:00:
69:88:aa:bb:aa:1e:77:32:d3:d2:3e:d7:8b:1b:0d:
eb:c7:3c:f2:e4:93:aa:50:11:04:7c:e8:a3:3e:65:
b0:66:de:9a:58:2e:ba:29:30:8d:17:19:3e:52:19:
67:55:67:31:83:0f:a9:5a:5f:32:c0:d4:79:c6:fa:
b8:eb:2b:55:a2:f6:ca:af:91:d8:6e:5a:80:a0:83:
9f:02:d5:e6:dc:74:03:8b:6b:df:03:e7:05:e3:ad:
44:7e:eb:4a:a3:83:44:78:3d:fc:af:68:75:1d:50:
94:db:83:3d:1d:c5:1d:7f:31:94:8b:3f:4e:ea:b5:
a5:f7:f5:d6:76:a4:11:3d:b8:f6:e3:85:28:a6:96:
b8:22:d0:4f:78:5e:a8:5a:b6:18:ab:3f:26:6a:93:
2a:a5:35:9b:89:9b:d3:00:96:a3:62:ef:89:8d:ea:
a5:3f:60:4d:2c:30:12:1e:a9:12:3f:e4:a4:79:d9:
4c:5b:85:33:4a:7d:40:67:f9:b0:b8:c3:01:99:c0:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:23:31:D0:D7:2A:57:EB:55:1E:04:59:03:FF:8C:6D:32:6B:56
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bb:e7:5b:48:cd:87:b9:f3:99:13:7c:2c:a3:ca:92:b5:9d:
70:40:b4:35:2d:66:1a:66:cd:f8:42:3f:29:9d:bd:2b:a9:69:
94:b4:a6:d6:2e:a5:af:ac:1b:3c:46:54:e8:b2:d5:86:b6:89:
27:fa:01:6d:1d:4f:6c:aa:03:88:61:de:4b:63:dc:7b:e9:82:
f6:dc:f0:0a:88:95:20:28:6c:d7:af:b2:57:74:78:70:26:48:
2b:20:77:67:6c:58:24:80:13:ff:97:75:36:8d:b2:2b:b5:79:
c1:33:90:45:4f:7e:34:26:7d:61:cf:e9:0d:88:49:a4:c2:47:
e7:ba:9e:05:d4:32:ba:7b:aa:2f:58:6c:68:d6:d1:0f:06:a8:
0e:88:eb:de:a8:d2:08:2c:dd:cc:1f:8b:e4:a5:bc:65:95:c3:
31:c0:97:b2:92:84:c8:91:04:22:2a:f4:64:8f:57:1d:7f:b2:
68:d1:3d:01:48:47:94:e5:6d:10:20:ba:b0:a7:39:d8:6f:17:
da:8c:d4:30:db:f2:02:45:db:03:2f:d2:de:52:89:fb:92:2e:
c7:b9:01:20:b6:22:92:dd:e0:f9:3f:1e:b8:eb:ac:0e:46:c3:
35:64:9e:c6:11:c4:d6:b4:81:d8:e9:4e:30:f6:62:5f:3b:aa:
d5:b3:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:16:26 2025 by rpki-client