Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa
File: F11BA4EA75B811EDA34F9687C4F9AE02.roa (raw, json)
Hash identifier: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=
Subject key identifier: 9D:53:D3:57:5A:69:76:8C:18:D6:4D:65:8F:C0:01:C3:BF:7D:B0:D9
Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Certificate serial: 0197
Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa
Signing time: Thu 09 Jan 2025 02:16:33 +0000
ROA not before: Thu 09 Jan 2025 02:16:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133876
IP address blocks: 103.44.148.0/24 maxlen: 24
203.16.200.0/24 maxlen: 24
203.16.201.0/24 maxlen: 24
203.16.202.0/24 maxlen: 24
203.16.203.0/24 maxlen: 24
2400:bf20::/36 maxlen: 36
2400:bf20:1000::/36 maxlen: 36
2400:bf20:2000::/36 maxlen: 36
2400:bf20:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Validity
Not Before: Jan 9 02:16:33 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f3180-0486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:48:2f:f2:d5:0c:9e:d5:ae:66:f3:eb:c0:
9c:1d:2b:85:6b:f2:57:51:3b:47:75:62:b4:f1:00:
04:35:56:46:bb:f3:54:56:27:75:10:76:be:83:e4:
f2:c5:bc:1e:d2:74:b3:38:c2:61:9a:76:ba:d0:c3:
d8:46:1e:16:68:50:20:5e:eb:af:cd:15:f5:31:b7:
4f:5c:32:59:b8:25:54:a8:e3:b5:c5:3c:67:87:9c:
4f:c4:99:84:e5:3a:a7:56:54:60:86:cf:97:39:83:
51:68:7e:7f:58:67:3f:54:59:81:60:4f:3e:8e:96:
8a:6c:3d:64:bc:fa:09:53:60:23:e1:f0:56:d5:2d:
63:53:9d:68:7d:ee:27:46:55:18:e1:97:6d:da:35:
56:5a:8e:0b:18:db:46:88:c1:bf:fd:68:67:60:2a:
5c:69:ad:fa:65:94:ea:67:49:91:c2:d4:71:31:91:
65:d3:16:bc:43:51:cf:ab:ed:06:18:c7:51:5a:4f:
59:65:2c:a8:4a:3c:76:7d:bd:a6:0e:3f:6b:59:48:
bd:8e:3b:c5:9c:df:93:c8:1a:9d:c0:29:11:c2:73:
a4:1b:15:19:2e:2f:db:14:da:a5:23:f2:99:ef:35:
11:65:91:61:04:a6:c5:9e:8d:2d:63:26:85:23:bc:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:D3:57:5A:69:76:8C:18:D6:4D:65:8F:C0:01:C3:BF:7D:B0:D9
X509v3 Authority Key Identifier:
keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.148.0/24
203.16.200.0/22
IPv6:
2400:bf20::/34
Signature Algorithm: sha256WithRSAEncryption
18:81:f9:bb:8a:e1:bf:32:c9:80:62:12:96:40:00:99:ef:a7:
2c:16:65:51:02:cb:05:7e:08:82:ab:10:28:92:f9:b0:b4:70:
83:08:50:d0:27:95:3b:59:3c:98:0e:1c:57:42:c9:40:38:09:
a6:a1:8d:31:b5:d9:6b:7c:7d:b1:92:76:9d:46:78:20:bf:68:
44:57:a7:f9:8d:0b:2c:ab:5a:49:87:34:cc:c7:b6:8b:a0:29:
02:14:c5:8c:4c:09:3e:9b:ef:06:d5:30:ce:cb:03:a0:e8:cd:
3e:73:d3:43:59:cc:d9:d7:52:f8:c0:4b:be:d2:74:d5:66:3c:
10:b6:5e:c8:cf:86:56:3f:ee:20:c8:1c:12:77:56:50:94:90:
fe:6f:b3:27:80:6c:76:62:1c:17:b0:6b:f5:2c:90:d1:53:ec:
0d:ac:df:86:75:94:91:29:3d:0a:ea:71:d1:52:63:6d:e3:23:
77:e9:6f:d3:e5:f4:9d:e8:b8:f3:ae:5c:89:93:ca:40:eb:23:
77:6a:28:74:34:af:72:25:74:34:e4:da:fc:c2:a6:e4:65:3a:
c0:26:67:6f:c5:06:13:4b:d4:19:50:30:d2:bb:0b:29:8e:2a:
64:b6:a7:1f:7f:87:b3:f6:b7:9a:34:41:34:27:17:ce:00:44:
d9:a2:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:17 2025 by rpki-client