Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa
File: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (raw, json)
Hash identifier: 3pP3sdtqTiWCcrGq+H7BVXzx0my8jLX9t9qyXkMSDe8=
Subject key identifier: FC:E0:36:41:8F:4E:C3:5E:D2:A1:ED:1E:16:5A:68:5E:A4:E8:DD:6F
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0C56
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa
Signing time: Wed 04 Dec 2024 03:20:17 +0000
ROA not before: Wed 04 Dec 2024 03:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141452
IP address blocks: 103.214.80.0/24 maxlen: 24
103.214.81.0/24 maxlen: 24
103.214.83.0/24 maxlen: 24
144.48.85.0/24 maxlen: 24
144.48.86.0/24 maxlen: 24
144.48.87.0/24 maxlen: 24
2404:d580::/32 maxlen: 32
2404:d580::/48 maxlen: 48
2404:d580:1::/48 maxlen: 48
2404:d580:2::/48 maxlen: 48
2404:d580:3::/48 maxlen: 48
2404:d580:4::/48 maxlen: 48
2404:d580:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: Dec 4 03:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674fca71-b5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:f6:3e:82:f8:06:8e:9f:5c:04:cc:da:34:
28:92:24:09:d1:5c:4a:ba:c0:42:a3:bd:b6:a6:04:
00:03:6f:38:64:3b:c8:fc:2f:13:fa:7b:f7:58:3f:
14:f4:c0:b0:13:dc:90:61:e5:71:50:f2:a5:fc:4f:
bd:26:04:88:2d:2d:47:34:4d:be:5f:ab:78:16:f9:
8b:3d:4f:5e:7a:76:f7:5d:d7:27:80:40:d1:72:a3:
99:90:b7:5d:e2:06:90:4c:fc:df:6d:91:3c:d6:b8:
61:1b:84:07:4b:c1:ad:34:99:01:0c:17:02:05:52:
5a:ef:bd:67:eb:5b:9b:43:63:8a:1d:7a:33:89:20:
c9:94:2a:70:49:c8:8d:0e:a1:44:5c:a3:2a:53:e1:
83:2f:61:b8:89:19:e0:14:de:91:90:aa:4f:cb:b9:
38:e2:57:8f:ec:9c:0e:31:09:0b:7b:27:57:9d:8b:
bc:3c:c0:21:19:86:24:3a:df:26:45:92:cc:78:0e:
18:e3:09:8e:22:9b:07:fc:74:80:f5:52:69:7a:3d:
35:54:4a:6e:09:3d:54:17:14:f0:55:c1:f9:9d:9c:
4b:5c:dd:a3:a8:a1:30:e3:59:0b:fc:fb:90:9b:7e:
e0:5e:11:68:2a:c3:63:28:35:33:87:35:43:86:96:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:36:41:8F:4E:C3:5E:D2:A1:ED:1E:16:5A:68:5E:A4:E8:DD:6F
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/AF0508E8B1EE11EF93E70F63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.80.0/23
103.214.83.0/24
144.48.85.0-144.48.87.255
IPv6:
2404:d580::/32
Signature Algorithm: sha256WithRSAEncryption
97:22:fb:1e:c8:91:0d:36:22:f6:6d:be:a5:a4:cf:5a:95:66:
5f:6c:bd:d6:3f:00:bc:6d:3c:5c:0b:55:28:4c:88:90:1c:80:
d3:9c:5f:d8:d7:db:96:3b:d8:13:f9:3d:f0:54:a4:df:4e:55:
95:cd:bb:af:47:22:c4:c5:30:1d:ac:90:22:b4:18:c5:39:75:
10:62:4f:93:7d:aa:9e:3d:21:a8:a8:c0:74:de:bc:c1:60:ac:
0f:71:37:31:4e:1f:b2:0a:e9:24:58:48:0f:f7:e0:68:9b:b6:
0a:11:ec:60:3e:a3:e7:dd:11:d6:c0:b8:66:f6:c1:91:85:47:
89:c6:62:ec:58:7c:cf:8a:bc:12:fb:d3:54:17:0f:90:55:3b:
9b:c4:cf:70:b6:64:9f:bd:c1:47:4b:5e:e4:74:00:01:26:ef:
d2:db:05:76:50:59:4d:77:68:02:b2:6f:bc:be:07:5e:f0:6c:
1a:09:92:59:a1:73:24:fc:8d:3b:f4:6f:fb:c2:bc:c6:2d:ee:
05:81:34:a3:87:af:75:f2:9e:a5:2d:e7:28:f2:b7:f7:52:32:
d1:d6:52:59:97:f2:76:e0:2b:76:7e:8b:6f:5b:d6:02:31:ae:
3d:0d:c7:01:8a:a8:7f:2e:2d:19:5a:d6:66:93:0b:ff:39:b4:
15:91:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:38:37 2025 by rpki-client