Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa
File: E8B6593E38D611EF9B2A0B1CC4F9AE02.roa (raw, json)
Hash identifier: ML05tIhfPPPKTJGxmiWcRHeARlxvccwno//ZTa1YmaQ=
Subject key identifier: 6C:73:AF:87:AF:9F:8D:19:95:12:1E:6A:6D:8E:C1:B7:3B:5E:A9:51
Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Certificate serial: F8
Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa
Signing time: Sun 01 Dec 2024 04:27:32 +0000
ROA not before: Sun 01 Dec 2024 04:27:32 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 139008
IP address blocks: 103.218.226.0/24 maxlen: 24
103.218.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB17
Validity
Not Before: Dec 1 04:27:32 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674be5b4-1762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:eb:37:50:d4:6f:33:71:27:c5:6c:d8:a4:
b4:ea:cd:17:e0:9a:8a:ec:1f:d5:4b:07:06:2c:b4:
bb:25:6e:1b:db:e1:26:8f:cd:c4:e2:58:22:2c:ef:
74:25:72:e0:ff:90:b0:a8:5f:c6:ff:c9:bc:7b:6e:
5c:8e:94:33:9c:9f:e9:aa:c7:d8:bf:a1:74:5a:c8:
ab:63:e1:c6:06:30:79:40:eb:09:f9:9e:89:9e:b4:
dd:69:33:76:03:fc:2d:d2:20:6a:8f:e6:9f:af:e1:
7e:fb:97:ab:87:5c:f3:4d:c3:56:52:2e:73:cf:a3:
30:1b:6b:cc:1b:c1:02:01:c1:e1:90:90:d8:2a:39:
54:07:66:56:93:a8:dd:a9:05:05:70:60:6b:78:89:
bf:5f:2d:b7:db:92:05:f0:34:1e:3f:53:2e:15:2a:
07:50:c0:51:e9:7d:95:a3:8e:b9:0f:e9:a9:ed:a5:
50:0a:7e:07:3f:61:c2:5c:db:33:a0:35:fe:9c:42:
ce:67:af:1f:e2:01:14:d7:99:56:56:34:02:2b:c9:
bd:dd:c0:db:25:c2:ee:27:d4:77:02:32:1e:6b:5c:
c7:4f:6c:95:c4:a4:73:d1:58:f6:62:b9:b0:1b:26:
ed:c9:78:7a:27:54:f0:50:00:26:1c:9e:a3:ae:a7:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:AF:87:AF:9F:8D:19:95:12:1E:6A:6D:8E:C1:B7:3B:5E:A9:51
X509v3 Authority Key Identifier:
keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/E8B6593E38D611EF9B2A0B1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.226.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0f:f4:df:7f:1f:f5:4d:36:e4:39:40:58:80:82:e2:2a:83:
7e:a6:d7:51:52:49:3c:7f:96:09:1e:75:d7:a8:7c:83:da:71:
9a:8c:42:24:8a:fc:02:f8:2c:f6:1e:97:3e:d8:1e:be:89:7f:
08:b6:06:63:b9:d5:ce:72:1c:4a:47:97:bf:e5:f7:76:75:75:
88:9c:43:b3:f1:75:ea:c5:10:1d:5f:00:70:06:68:b5:96:d3:
0e:0f:f8:08:b4:36:ac:a4:2f:91:fd:1c:86:03:c1:5b:86:20:
b4:8d:a8:48:88:09:74:bd:48:f8:d6:fe:9b:ca:62:70:0a:29:
8d:88:86:91:24:b3:5c:8b:87:00:51:28:ec:3d:54:f9:44:08:
1d:71:89:26:3d:97:2e:bf:be:6d:50:87:24:2b:05:d3:5d:82:
19:a0:79:3c:f8:7e:39:1a:a0:a3:4c:9a:62:59:d8:80:4b:08:
19:46:c3:c3:dd:58:82:52:d4:89:5e:79:a4:bb:cf:4d:24:13:
b3:65:49:f9:f3:0f:8b:c2:1f:e2:77:df:c6:3d:09:6d:85:04:
20:cb:38:1e:89:7c:2c:f0:44:38:66:ef:9e:a1:e9:1f:87:70:
97:5f:47:e7:db:72:4f:d9:fc:be:9f:b8:a5:a4:42:9c:86:7c:
d6:ea:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:30 2025 by rpki-client