Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
File: 28741DDC85CD11ECA5E28171C4F9AE02.roa (raw, json)
Hash identifier: h7xEXaEvYTfu7GxDgzGy92oe3f4LEj4g8nYpzof+3gw=
Subject key identifier: E5:9C:E4:F3:05:F1:6A:8F:6A:85:D5:32:61:79:BA:48:EA:1B:BC:63
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 03DD
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
Signing time: Fri 31 Jan 2025 00:45:38 +0000
ROA not before: Fri 31 Jan 2025 00:45:38 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 140607
IP address blocks: 103.177.240.0/24 maxlen: 24
103.177.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jan 31 00:45:38 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c1d31-0666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:dd:e6:bc:3e:84:9a:5b:69:a6:74:d1:c2:
73:0a:f6:c8:3e:db:7c:7e:b4:8a:59:18:66:74:e5:
61:0b:ba:c5:ba:b9:b1:80:bc:6e:83:26:d0:cf:4c:
8e:14:4e:dd:15:c2:0b:81:2a:93:55:d3:18:15:73:
01:1d:77:3e:80:f0:08:40:f2:8d:03:09:81:b1:7e:
f0:45:1a:5e:33:04:5d:c0:c0:e7:b1:93:2a:3c:7b:
ca:08:5f:30:00:64:e8:b3:2e:18:b5:01:16:ea:d3:
4d:0d:fc:33:30:6d:18:8b:2c:be:9c:e9:1d:2d:2e:
6e:4c:72:67:52:cb:29:a2:12:25:45:b9:39:d0:68:
d7:f0:b0:fd:86:36:10:a9:02:ba:70:61:9f:3a:6a:
b9:f0:52:77:08:f0:94:15:18:d3:d9:d3:52:8a:9e:
0b:dd:1a:9c:cc:11:94:49:b3:d1:a0:7e:4d:85:55:
fb:df:ff:1c:79:e0:2d:11:c6:d2:71:20:67:40:20:
95:8a:a8:29:3b:01:ee:f5:98:44:89:0a:12:62:a3:
f6:a6:57:a9:17:33:b7:eb:5f:7b:de:53:0d:13:35:
a9:c4:4e:c2:48:70:1b:81:8f:60:c2:92:b3:c6:b6:
5f:06:30:af:3f:0d:1c:b0:69:b3:2a:df:33:e8:e8:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:E4:F3:05:F1:6A:8F:6A:85:D5:32:61:79:BA:48:EA:1B:BC:63
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.240.0/23
Signature Algorithm: sha256WithRSAEncryption
72:ca:6e:da:b0:91:51:40:0e:fa:90:1a:4c:64:a3:2c:f4:7f:
b2:7e:9e:44:83:6e:cd:e6:e3:0b:06:90:b2:13:6d:f6:e6:17:
13:de:79:15:49:04:ed:9c:92:4f:41:af:66:5d:62:97:3d:79:
fa:7b:cc:ba:0c:d4:1b:21:5f:db:14:8e:30:d9:2c:6d:10:d9:
f5:2a:f4:26:50:dc:d7:0e:a4:24:52:49:fc:0c:79:35:e5:ea:
a2:cc:79:1a:3f:2a:6c:87:f7:7f:8c:68:01:c1:e5:70:5f:e2:
7b:b1:ad:8a:48:e7:b5:50:db:6b:c1:ed:9a:ee:37:47:6a:7c:
40:6c:c6:08:c9:62:f3:a6:1c:b8:98:c7:f6:85:fa:6d:13:e4:
d7:a3:08:1a:26:fb:60:b3:7f:1d:58:49:61:f0:ec:bf:f6:bd:
e3:b7:5f:f2:01:74:2c:6d:94:9b:06:e7:d6:72:63:8e:4c:76:
8a:ab:67:76:89:f8:47:06:b0:5a:76:75:26:f4:a9:7b:16:57:
86:a4:26:5f:53:05:f0:a1:b1:b2:72:32:ae:ad:65:86:ea:1c:
e1:f1:04:02:13:e1:47:f0:41:df:5b:25:da:60:d5:82:52:7e:
59:00:1b:27:c5:ee:30:e9:57:1e:d6:b3:03:10:0f:8a:c9:38:
a5:a0:a8:9c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE
Q0QwMUNGOEQwHhcNMjUwMTMxMDA0NTM4WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzljMWQzMS0wNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+rd5rw+hJpbaaZ00cJzCvbIPtt8frSKWRhmdOVhC7rFurmxgLxugybQz0yO
FE7dFcILgSqTVdMYFXMBHXc+gPAIQPKNAwmBsX7wRRpeMwRdwMDnsZMqPHvKCF8w
AGTosy4YtQEW6tNNDfwzMG0Yiyy+nOkdLS5uTHJnUsspohIlRbk50GjX8LD9hjYQ
qQK6cGGfOmq58FJ3CPCUFRjT2dNSip4L3RqczBGUSbPRoH5NhVX73/8ceeAtEcbS
cSBnQCCViqgpOwHu9ZhEiQoSYqP2plepFzO361973lMNEzWpxE7CSHAbgY9gwpKz
xrZfBjCvPw0csGmzKt8z6OgyfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOWc5PMF
8WqPaoXVMmF5ukjqG7xjMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE
NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6
NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMjgvM0EwMTY0NzY2RDUyMTFFQ0FDNjFCQjE3QzRGOUFFMDIvMjg3NDFEREM4
NUNEMTFFQ0E1RTI4MTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsfAwDQYJKoZIhvcNAQELBQADggEBAHLKbtqwkVFADvqQ
Gkxkoyz0f7J+nkSDbs3m4wsGkLITbfbmFxPeeRVJBO2ckk9Br2ZdYpc9efp7zLoM
1BshX9sUjjDZLG0Q2fUq9CZQ3NcOpCRSSfwMeTXl6qLMeRo/KmyH93+MaAHB5XBf
4nuxrYpI57VQ22vB7ZruN0dqfEBsxgjJYvOmHLiYx/aF+m0T5NejCBom+2Czfx1Y
SWHw7L/2veO3X/IBdCxtlJsG59ZyY45MdoqrZ3aJ+EcGsFp2dSb0qXsWV4akJl9T
BfChsbJyMq6tZYbqHOHxBAIT4UfwQd9bJdpg1YJSflkAGyfF7jDpVx7WswMQD4rJ
OKWgqJw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:22 2025 by rpki-client