Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/EE0C206E96FF11ED87B56F84C4F9AE02.roa
File: EE0C206E96FF11ED87B56F84C4F9AE02.roa (raw, json)
Hash identifier: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=
Subject key identifier: CF:B5:5B:B8:62:C8:0F:7F:1A:2B:51:DB:03:DD:CE:B1:09:C1:AA:DB
Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial: 018B
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/EE0C206E96FF11ED87B56F84C4F9AE02.roa
Signing time: Tue 29 Oct 2024 02:58:28 +0000
ROA not before: Tue 29 Oct 2024 02:58:28 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133608
IP address blocks: 103.172.233.0/24 maxlen: 24
2407:dac0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911285C
Validity
Not Before: Oct 29 02:58:28 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67204f54-4af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:91:3c:77:48:69:4a:c0:73:43:a8:19:6a:
8e:87:eb:37:0b:87:d3:12:14:ed:a6:2b:e5:8a:41:
e9:52:c5:de:6b:7d:79:72:2b:4f:09:33:07:42:08:
6e:6e:3a:db:36:63:ee:f6:bf:99:3f:58:c0:69:cf:
1c:93:97:ba:54:a3:05:0c:3f:3f:43:11:a2:a8:63:
73:5d:ae:37:3e:25:93:ae:7e:2b:44:a9:e1:7d:a8:
7f:f3:12:6a:24:14:11:f7:3d:d6:78:0a:70:64:f4:
78:7e:a7:5e:c1:b7:99:20:d4:4b:06:25:b9:a1:7d:
1b:47:38:55:98:3a:90:c1:51:b8:3f:d4:36:a8:ec:
8f:d1:ba:31:aa:a7:26:13:47:58:3b:dc:d0:24:e7:
f3:8c:ec:24:e2:bb:e1:e4:41:ff:7f:1c:5a:ad:e0:
36:5b:df:b0:2f:32:72:21:47:38:5d:dc:0d:76:e0:
11:fd:83:3a:23:e3:0e:ce:90:7f:92:bf:08:e3:83:
15:df:9e:d7:68:b6:f5:bf:7d:f5:83:9c:14:78:45:
8a:ff:94:bd:74:86:d0:da:a6:dc:7b:64:06:f2:c4:
cc:0d:75:80:ed:19:23:06:43:6b:cf:96:c0:a7:4a:
f7:2d:41:e0:e4:03:24:4b:f0:6a:09:0c:83:c2:59:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:5B:B8:62:C8:0F:7F:1A:2B:51:DB:03:DD:CE:B1:09:C1:AA:DB
X509v3 Authority Key Identifier:
keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/EE0C206E96FF11ED87B56F84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.233.0/24
IPv6:
2407:dac0:2::/48
Signature Algorithm: sha256WithRSAEncryption
3e:a8:de:c7:3d:53:ee:93:f7:37:18:14:3f:d8:1e:a5:73:92:
db:52:2f:05:1f:2d:dc:a1:31:d7:48:1b:d7:06:b1:7d:88:5a:
81:90:af:e9:24:5d:96:bb:7d:79:b8:02:c1:17:95:d6:b1:82:
18:38:36:d7:e0:79:6c:0d:3d:44:eb:01:5c:a5:1a:83:e6:37:
a5:ad:4b:a8:4a:b7:42:4a:bb:24:99:58:7c:f1:fc:7b:f9:b1:
9a:b9:f4:ef:bb:e8:8a:64:7a:39:d9:04:51:1d:3a:b7:8e:ec:
a5:83:df:70:3d:93:89:39:0a:5a:90:b0:6d:27:fa:78:38:dd:
c1:8f:ad:00:ac:c1:4a:0f:f6:35:f0:cb:1d:49:4b:ba:9a:e1:
e1:ba:70:4a:0f:a3:40:95:fe:4d:c0:9a:61:24:95:70:c7:9b:
3c:f7:e8:e8:de:fa:18:3d:e4:f4:d0:e4:e0:c4:f5:9f:9f:fb:
ea:ee:08:6f:18:0d:80:93:e3:15:34:2c:f8:70:6e:cd:d2:e5:
cf:e3:27:58:f2:a2:7e:6f:56:c4:2f:5a:36:03:c6:15:9f:58:
51:35:2d:28:d3:ab:1d:af:9a:5c:a9:cb:68:6f:02:d4:3d:a2:
c8:0e:28:58:58:8c:14:97:ec:4b:f5:ff:2c:5e:14:38:34:24:
8c:26:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:52 2025 by rpki-client