Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa
File: A292E3529E9711EEB6899B1CC4F9AE02.roa (raw, json)
Hash identifier: tLBsV4g2bMzhVFiX/6V4C27n2kArFIEOkUcBuZutWVg=
Subject key identifier: CA:3C:B0:2B:6F:B4:20:6D:E9:51:3D:50:B6:70:12:BC:A9:A3:11:76
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 08F5
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa
Signing time: Sat 08 Jun 2024 22:08:29 +0000
ROA not before: Sat 08 Jun 2024 22:08:29 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140607
IP address blocks: 103.150.242.0/24 maxlen: 24
103.150.243.0/24 maxlen: 24
2400:d860::/32 maxlen: 32
2400:d860::/43 maxlen: 43
2400:d860:20::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Jun 8 22:08:29 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6664d65c-81e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:3d:c2:17:c9:04:ba:10:43:66:49:36:ab:
20:ce:98:5a:4e:35:95:eb:3f:28:77:3a:88:37:e3:
b0:c8:e8:cb:59:12:de:9d:7c:66:8f:04:9f:f9:0e:
96:b7:c9:a5:a6:96:66:16:af:8b:0f:7c:b7:79:fc:
d8:56:58:12:09:2b:24:9f:f1:c0:b1:51:17:b7:93:
63:b1:16:34:8f:d9:eb:2e:df:20:80:46:09:89:45:
fb:b2:80:12:93:81:0b:f6:1d:ef:8b:b8:57:88:d9:
5d:a2:fe:e6:8d:28:27:8c:0b:0c:93:5e:94:9a:b9:
39:a4:7a:2f:e4:e0:8d:33:e9:0a:58:08:ec:c7:f3:
7c:e9:b0:0e:fa:84:b8:f3:69:cb:1c:33:bb:ea:48:
b8:00:7d:db:94:e6:13:35:1b:b0:65:93:e3:09:03:
30:a0:16:4c:c7:e7:17:1e:dd:3c:a9:7b:5f:8d:65:
35:76:1b:da:10:2e:5f:74:1c:6d:5d:ab:7a:5c:51:
48:71:70:26:c9:63:eb:6e:28:27:c7:dc:b9:a8:8f:
d4:3b:8a:e5:1d:33:52:83:f7:74:57:30:16:57:59:
71:65:65:94:dc:f9:17:cc:99:66:1a:ff:58:b1:5f:
a7:26:ee:5f:01:c9:53:a0:b5:9d:f5:8f:86:87:f4:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:B0:2B:6F:B4:20:6D:E9:51:3D:50:B6:70:12:BC:A9:A3:11:76
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.242.0/23
IPv6:
2400:d860::/32
Signature Algorithm: sha256WithRSAEncryption
52:fd:44:ae:81:2c:3a:02:81:3d:26:e7:89:5d:7a:73:12:4e:
e7:8c:25:84:f9:b0:9f:8c:f7:73:04:8f:b6:51:f7:47:fe:32:
7e:ba:3a:69:96:3b:5c:cd:fa:72:6c:03:52:60:a0:c9:a8:fb:
c5:21:6b:48:fd:3b:c3:16:c1:1e:92:34:06:8d:c5:e7:f9:b7:
8b:bd:7d:32:cf:50:5b:ba:1d:b8:c7:0f:80:91:a6:96:00:ac:
bb:59:eb:3a:22:c3:73:f1:23:c8:7c:f8:13:42:cd:30:f4:f4:
9d:05:3a:51:fc:3a:0f:6e:9b:6e:41:aa:7d:35:b3:4d:47:0b:
1a:2c:31:ee:76:57:e5:07:2e:ab:de:21:a0:7c:98:6c:b4:5b:
80:79:a3:29:e6:bc:0b:45:3c:a1:3c:cf:04:8d:91:5f:eb:66:
81:5f:1c:de:0c:a5:c2:2e:29:a9:01:5e:fd:48:39:70:45:ad:
61:74:be:fe:fa:0c:ce:37:8a:8d:8e:b3:2c:d1:e6:42:34:e9:
87:95:64:12:1f:3a:f4:d9:56:64:09:be:1b:5d:86:af:7b:07:
bc:cd:c2:18:6d:f1:49:00:2d:b3:85:b8:e4:f6:b3:2b:bf:02:
ae:a2:78:62:d1:4b:c0:d2:be:1b:d8:7f:c9:07:f3:73:fc:0e:
49:99:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:48:37 2025 by rpki-client