Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
File: DCB2531AC75911EF979D593BC4F9AE02.roa (raw, json)
Hash identifier: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=
Subject key identifier: 72:82:77:7A:2B:68:3F:81:E5:53:4F:2A:99:9A:E7:BC:54:DD:E6:85
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0E6B
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
Signing time: Tue 31 Dec 2024 09:30:24 +0000
ROA not before: Tue 31 Dec 2024 09:30:24 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 134715
IP address blocks: 103.197.176.0/22 maxlen: 24
220.158.236.0/22 maxlen: 24
2403:580::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3691 (0xe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Dec 31 09:30:24 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6773b9b0-d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:2c:3f:92:38:1c:c6:00:b1:b4:07:9c:45:
08:5c:39:b7:99:40:26:aa:d2:fc:d1:2e:51:1d:9c:
2f:66:cd:65:4f:ac:a1:c5:fa:be:b0:7d:f2:c9:65:
5d:56:58:99:51:9e:dd:50:20:a9:b4:6e:dc:8b:ec:
1c:b3:ce:81:ea:8b:ff:7a:49:08:31:34:af:f8:c9:
d9:fe:f9:32:8e:05:11:af:26:f5:12:38:55:3e:93:
e1:da:fb:ef:b2:17:c7:ae:5e:7f:0d:fb:4f:0d:5a:
99:31:63:ac:69:8c:69:3b:52:bf:7e:da:7b:9c:91:
f3:1c:07:e1:d1:e7:e1:23:bc:4e:fb:ff:11:41:52:
5c:ba:ac:41:65:a7:72:00:cb:b7:bf:1b:a5:b7:79:
e0:47:8b:b0:16:1e:4c:b5:53:e5:da:c4:c8:8a:74:
3f:89:33:dc:f0:90:e7:8b:5f:4c:77:0b:f1:d6:23:
d5:fa:6f:33:ae:03:00:ba:6d:bb:8a:83:7a:da:a7:
6b:89:2f:04:ac:7c:ea:ef:3b:91:42:ce:3d:f5:78:
37:d5:13:9d:84:d7:ea:68:bd:1c:ff:96:bf:81:aa:
3a:4b:ff:bd:88:e5:ce:b4:c9:2e:b4:93:15:27:33:
83:b6:cf:98:2d:bf:25:71:ef:a1:ff:c6:52:a5:a9:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:77:7A:2B:68:3F:81:E5:53:4F:2A:99:9A:E7:BC:54:DD:E6:85
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/DCB2531AC75911EF979D593BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.176.0/22
220.158.236.0/22
IPv6:
2403:580::/32
Signature Algorithm: sha256WithRSAEncryption
7a:6f:cd:01:e5:2b:a6:86:33:ba:91:61:5c:24:e3:62:c4:6b:
03:cb:e7:a6:74:ea:0b:f4:a7:6a:12:48:9d:df:17:11:d7:1c:
34:6f:0b:de:94:ec:53:91:63:87:9c:ab:b8:5a:5a:04:90:27:
77:ce:6a:e3:cf:34:84:b7:52:11:c6:83:6a:1d:c3:7d:a3:a5:
15:21:3a:e8:9e:cf:8c:12:cb:f0:70:46:d3:b8:39:b8:b8:6b:
ab:1b:08:fe:6b:57:83:f2:55:9f:35:c8:cb:48:a8:df:4c:76:
23:cf:0a:cf:a8:49:26:77:fd:fd:09:cc:58:c8:fb:88:31:fe:
9f:5b:40:d9:45:cc:51:6e:f0:d5:ff:47:00:56:cc:ea:17:53:
24:5c:e0:41:bf:06:99:5b:f5:b5:49:ab:41:74:07:eb:a0:4c:
ca:e1:55:cf:af:4e:91:ae:9b:44:de:ef:9d:05:a4:74:87:e8:
0e:32:8e:74:30:1c:65:67:64:35:01:9e:f1:b0:4c:49:15:a0:
18:e9:02:57:c1:65:89:d2:10:f9:7c:65:e7:1b:87:4b:ca:02:
f5:31:db:7d:59:3b:fb:27:87:7a:c1:13:2d:0e:6d:8d:e1:c2:
6f:25:39:c7:ad:2c:f5:a7:ee:42:0f:4b:fb:45:3f:0c:6e:e0:
0f:74:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:18 2025 by rpki-client