Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa
File: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (raw, json)
Hash identifier: Cao5bthPX96QQ3SQheHb0r7GeyEcmcCxx6iv6SXw/fo=
Subject key identifier: D6:65:58:7F:E3:ED:76:BD:71:71:23:F0:EF:1F:6E:D0:46:E4:8E:2F
Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Certificate serial: 06AB
Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa
Signing time: Thu 30 Jan 2025 22:14:28 +0000
ROA not before: Thu 30 Jan 2025 22:14:28 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134489
IP address blocks: 103.161.48.0/23 maxlen: 23
103.161.48.0/24 maxlen: 24
103.161.49.0/24 maxlen: 24
2407:1b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Validity
Not Before: Jan 30 22:14:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679bf9c4-7207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:bf:e7:19:56:cd:65:48:c2:4d:47:6f:19:
e5:6a:bf:22:53:80:88:56:44:15:14:3f:0e:bd:16:
8b:85:5d:6b:8b:09:f4:c9:33:20:e8:22:9e:19:f6:
0f:f8:05:c0:6b:eb:fe:47:7f:69:cf:cb:22:62:e6:
92:c0:53:30:a9:29:e8:70:20:fb:31:ff:6b:dc:a4:
b1:94:db:3b:53:96:b5:6e:2c:71:12:ce:fb:ca:97:
25:d0:ac:cf:3a:46:f2:1c:9c:c5:47:08:88:0d:27:
5b:c2:fc:a8:12:82:3b:d0:69:8a:f5:aa:1f:93:49:
73:1a:db:da:07:be:cf:97:63:90:56:38:b6:30:d9:
4a:92:31:12:cb:5b:90:83:f5:60:1d:61:c3:ff:e0:
2f:1d:b4:0c:f7:47:49:1e:70:13:54:ec:e4:24:45:
b1:bf:09:b9:43:13:e1:83:9b:0a:d9:22:b1:db:98:
e8:67:ec:ac:7a:53:61:da:9b:9b:4d:cf:d2:4f:9e:
3c:84:60:23:b3:8d:5f:58:67:a7:6b:8d:bb:b2:76:
10:2b:cc:01:cb:20:b0:35:28:cc:24:49:98:1b:d8:
34:3e:42:7c:3f:70:44:96:75:a9:bf:04:d0:3e:97:
e1:57:bf:d3:ef:d1:b1:49:f1:c7:f7:ff:9c:c7:1b:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:58:7F:E3:ED:76:BD:71:71:23:F0:EF:1F:6E:D0:46:E4:8E:2F
X509v3 Authority Key Identifier:
keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/C17E4DE2503E11EBB72F4C61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.48.0/23
IPv6:
2407:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
78:73:d1:92:38:b9:54:8c:ce:5a:da:dd:b8:7b:1e:78:89:f8:
5e:3b:cd:65:3d:4a:ac:32:c0:25:ca:dd:eb:f6:29:d0:ac:bd:
1b:fc:96:c5:1b:dc:a4:a4:9e:23:a5:7b:62:ed:34:3d:17:5c:
03:de:f6:bb:5f:16:bf:cc:31:f0:f9:2e:b1:4c:d3:71:8f:f6:
6b:20:72:bf:22:a0:37:f2:d8:9e:c1:8e:09:86:dd:f0:dd:87:
54:ff:66:24:ad:46:f9:44:33:d1:cb:5c:4b:8e:1d:aa:f6:c0:
3b:13:da:ba:a1:7b:0d:12:c3:b6:93:8f:cd:ed:e5:6d:88:e1:
87:48:6f:94:0e:8c:13:5f:fe:6a:52:d6:82:f4:60:62:c2:51:
cf:31:23:a3:f4:45:3d:a9:1e:7f:ff:29:33:2e:9b:08:65:aa:
d2:f5:68:ce:7a:bf:e8:42:f3:0b:c0:69:78:73:f2:48:ac:d5:
37:95:77:6b:79:ff:9e:3c:5b:77:c5:24:65:9c:1a:48:91:f8:
5f:8f:a5:27:4a:15:b9:0e:87:cd:3e:a0:41:5e:fb:a9:82:38:
bd:6e:4f:c0:4a:bf:41:ca:16:26:f6:40:5a:7e:f1:fb:c7:c1:
b2:f1:3a:d5:12:f1:59:17:5d:9b:a5:f0:6c:3f:35:8e:2f:d1:
52:9c:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:33 2025 by rpki-client