Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa
File: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (raw, json)
Hash identifier: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=
Subject key identifier: 5C:47:6B:57:DF:9E:6C:AD:AF:7F:99:84:CF:AD:1E:B7:78:3E:90:A0
Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Certificate serial: 076C
Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa
Signing time: Sat 28 Dec 2024 21:09:49 +0000
ROA not before: Sat 28 Dec 2024 21:09:48 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139903
IP address blocks: 103.146.250.0/23 maxlen: 23
2001:df2:7580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Validity
Not Before: Dec 28 21:09:48 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6770691c-79ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:a1:8f:8c:87:98:89:c4:ec:83:79:d2:87:
7a:6d:97:f4:9b:64:88:67:34:38:14:9c:b4:3c:be:
07:d6:45:1f:e2:93:ae:8e:2a:e7:00:92:b7:4f:30:
1d:35:d4:af:65:ad:86:96:c5:55:76:dc:dd:ae:de:
70:70:73:55:6c:1b:27:a6:1d:06:0c:db:6a:88:db:
db:87:9d:7c:43:16:d5:a2:e3:07:10:ed:ac:98:6a:
e4:8f:2a:31:1c:e1:ab:88:99:37:74:41:a8:cf:d6:
cc:76:1d:35:9f:d9:62:9e:a1:d1:9a:a5:ba:2c:a6:
51:e2:45:08:ef:5c:2d:ac:b2:7a:a3:f7:b8:d8:d7:
fe:40:e8:72:23:e2:1b:c4:6a:73:6a:6a:75:ad:82:
10:83:3e:d3:c3:58:cd:cb:8f:ed:1c:74:e6:91:a5:
ab:e1:44:1c:fa:78:e7:11:ca:a2:b4:a5:39:35:e2:
3b:6f:8c:b8:6a:7e:f0:f6:31:5a:ec:02:09:2b:9b:
2c:0e:fa:98:6c:8d:3a:f8:6f:db:46:d2:b4:6c:bb:
79:d4:7f:a9:8c:f9:09:34:23:33:9c:4d:2b:3b:42:
2d:50:ea:35:69:1f:f3:a3:97:2b:2b:e2:9b:d5:b8:
dd:db:7e:66:70:34:90:d5:6b:46:18:b4:e3:24:25:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:6B:57:DF:9E:6C:AD:AF:7F:99:84:CF:AD:1E:B7:78:3E:90:A0
X509v3 Authority Key Identifier:
keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.250.0/23
IPv6:
2001:df2:7580::/48
Signature Algorithm: sha256WithRSAEncryption
32:3c:5d:bf:23:2c:47:23:d5:a2:ea:66:42:ce:a6:83:50:07:
e9:6c:82:b8:92:9e:52:4a:36:47:62:88:99:1d:2a:7d:8e:36:
51:e2:c0:02:fe:be:e3:f9:0d:27:ac:0d:46:9a:d3:8c:fc:d2:
92:40:8a:96:2d:b4:d0:18:87:98:28:0d:78:a2:36:1c:52:7e:
45:5d:11:ea:6d:a3:68:88:a8:57:ff:c0:60:6f:73:10:d5:b5:
d2:30:ad:6e:d3:6f:68:f2:db:f1:06:1d:d3:91:11:ce:a2:91:
71:d0:3e:7e:41:91:86:ff:02:b0:06:38:a1:d7:42:d8:a0:4a:
74:23:23:02:47:ee:11:78:e8:0b:a3:d4:50:4d:6c:38:1e:36:
f6:ab:08:46:ff:9d:dc:c8:3f:7e:94:00:35:e8:71:54:0b:52:
27:44:68:b1:44:c7:c7:8c:8d:a0:28:e7:52:46:40:6e:b8:a8:
4b:46:b0:92:c8:6e:34:77:30:5b:4a:99:7c:c8:66:1a:dc:bc:
fd:21:5e:66:81:77:cd:bc:38:e5:d0:9f:88:6e:b1:ca:8c:ce:
3a:b5:d7:38:38:73:7d:a0:cb:4b:ed:c0:b7:45:ef:75:0c:77:
2c:3a:24:30:05:e6:01:13:dd:15:02:44:e8:65:7d:25:b8:19:
69:5f:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:32 2025 by rpki-client