Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
File: E5502F78772411EE8659D21FC4F9AE02.roa (raw, json)
Hash identifier: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=
Subject key identifier: B6:0D:D1:2B:F8:9E:94:4A:C9:BD:19:22:7A:15:5D:7B:5E:D1:87:69
Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial: 72
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
Signing time: Fri 17 May 2024 07:41:31 +0000
ROA not before: Fri 17 May 2024 07:41:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9420
IP address blocks: 103.121.64.0/24 maxlen: 24
2400:efa0::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Validity
Not Before: May 17 07:41:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66470a2b-d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:29:94:96:7c:46:da:0b:38:dd:56:96:c5:
ff:96:a0:28:22:8e:55:ff:79:66:b9:b8:ad:50:ed:
ba:18:13:9d:bd:a1:3a:56:f6:f6:4d:63:f5:85:47:
17:e2:60:04:4e:94:74:42:09:50:1a:e9:cf:26:14:
3e:42:b9:f5:f7:24:d4:20:ea:ce:b7:1d:4a:ec:4e:
c9:cf:02:72:87:3a:3b:9d:1d:13:fa:e4:12:90:62:
ae:c7:15:ef:a9:be:4a:48:5a:cc:a7:55:22:7b:66:
1e:a0:23:ad:b6:62:1d:43:1d:e1:92:75:03:72:e2:
0d:d3:1e:e5:f8:a8:74:b1:fe:74:d4:85:24:a0:7b:
7f:e1:d8:e0:e2:64:b1:4e:3e:0b:75:c1:78:3f:39:
21:8f:6a:90:b0:61:e3:74:21:f9:c1:22:c1:8e:4f:
e3:fd:6e:e0:42:60:32:12:aa:af:36:58:01:ef:42:
75:95:45:5d:ae:4b:9c:6c:4c:f6:4d:cc:51:4d:2c:
a6:f2:8b:f4:9a:c7:8e:22:1d:89:a0:a9:e9:a6:13:
b5:c5:9a:d0:98:db:b4:82:cb:6f:17:f3:b4:09:db:
1b:f8:4f:fa:58:d5:79:59:be:ab:ee:59:07:6f:a6:
9e:f2:91:81:cb:b2:89:01:94:7b:8c:3a:da:2c:e6:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:D1:2B:F8:9E:94:4A:C9:BD:19:22:7A:15:5D:7B:5E:D1:87:69
X509v3 Authority Key Identifier:
keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.64.0/24
IPv6:
2400:efa0::/64
Signature Algorithm: sha256WithRSAEncryption
3e:6c:15:2b:89:39:de:68:79:40:a4:5a:0b:87:7b:47:6e:ed:
22:ad:db:69:19:7c:82:50:c1:db:d5:e6:c5:9f:33:20:cd:e9:
c6:73:62:c2:c4:6f:1e:a9:d1:13:39:51:f6:bd:35:07:84:c9:
c1:ac:3f:b9:a6:3b:db:d8:8c:c3:12:06:0f:36:f5:d2:a9:77:
09:be:47:3c:05:86:b4:b3:a4:e7:7b:d9:dc:11:29:9f:ad:23:
74:18:50:18:e2:3e:a1:d2:64:86:4b:0f:b7:7e:a5:b9:b3:b0:
8c:d3:33:7d:7b:9f:a0:4c:d1:06:32:2b:ed:dd:a3:13:ce:14:
18:03:6c:50:c3:e5:2a:17:c3:e6:5c:e0:56:14:da:d9:36:cc:
93:8f:f1:eb:f5:c2:96:9b:bb:a4:a3:16:02:85:97:2b:f0:5f:
2b:a2:4a:c3:19:22:11:30:3f:28:c6:f2:78:c4:aa:93:b1:f6:
e4:46:04:ca:38:fe:bd:82:98:d5:7f:8e:8b:88:b0:d8:81:b3:
3e:57:c9:83:d9:87:99:ce:44:e9:9a:ca:ec:e5:07:17:65:13:
a3:5c:3c:e8:bd:9d:f1:eb:7f:d5:b2:b6:1c:48:e5:21:cc:ed:
67:d1:de:17:55:62:f8:93:4e:85:bd:94:8a:c6:65:8e:55:84:
21:bf:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:34:09 2025 by rpki-client