Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
File: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (raw, json)
Hash identifier: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=
Subject key identifier: 10:14:58:A0:FB:60:69:53:E8:E4:6A:F7:66:BF:A7:FE:8F:AC:45:C4
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 06B6
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
Signing time: Thu 24 Oct 2024 23:43:04 +0000
ROA not before: Thu 24 Oct 2024 23:43:04 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150436
IP address blocks: 103.228.66.0/24 maxlen: 24
103.228.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412
Validity
Not Before: Oct 24 23:43:04 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671adb88-3ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:b3:de:c4:a6:26:37:bb:0d:b7:f4:75:ab:
a0:65:3e:03:6e:92:9c:73:71:34:fe:2e:16:8d:cd:
71:76:bd:31:9f:db:40:75:eb:3d:e8:e2:61:38:87:
88:8e:3d:e8:c9:ba:d5:07:3e:ec:5d:ca:92:6e:05:
47:9a:34:bc:96:da:07:78:78:73:37:d0:d1:b3:27:
7e:1d:96:42:dd:52:55:74:2a:21:ab:7e:6a:0c:d8:
d6:df:6d:a0:23:69:e8:56:a9:68:56:8d:fc:37:4c:
59:11:50:74:e7:a0:b4:82:82:a8:82:69:8f:23:ee:
4f:a2:85:5a:e8:80:cc:2e:f1:d4:56:71:42:82:9a:
cc:6e:ba:9a:ce:33:86:be:8b:2f:ce:2f:fb:b9:ee:
78:c2:8f:a5:fc:35:fc:8b:42:5b:bd:6c:49:d3:43:
6a:62:76:c2:e9:e2:70:5f:0d:68:b3:e4:52:71:9d:
76:7a:6a:d6:7e:f3:df:fb:97:bb:6e:1b:aa:b0:2c:
e5:3f:c4:20:dc:94:4d:e0:7b:f8:ab:0f:66:b0:94:
39:70:74:d1:82:74:a0:6d:70:de:6a:92:24:51:8f:
a5:96:99:db:e6:69:07:96:84:5e:5d:7a:e9:15:d4:
a8:99:c9:3a:1a:e1:d9:10:5c:ec:ad:cf:f4:35:9a:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:14:58:A0:FB:60:69:53:E8:E4:6A:F7:66:BF:A7:FE:8F:AC:45:C4
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.228.66.0/23
Signature Algorithm: sha256WithRSAEncryption
44:f4:05:e7:8b:6d:e9:9d:59:74:10:90:5e:e7:54:c6:b0:e1:
f4:51:90:fd:98:57:d2:80:0a:85:0b:10:56:36:7c:2f:ec:05:
69:dc:d4:6a:c7:21:fb:cc:54:8d:12:0e:cb:04:10:64:9a:0a:
8f:4f:47:b1:c3:31:a3:a7:83:51:24:54:01:60:c3:f4:06:b6:
ea:1f:09:68:81:7e:70:8e:9d:68:ff:50:3c:c5:d9:36:25:bd:
b0:13:6c:70:24:e7:62:4d:6f:34:fc:47:cb:0a:1c:9b:98:7e:
0f:50:0d:25:6a:a6:4c:da:f0:54:14:cf:56:82:0a:fc:26:40:
14:9e:39:0c:94:b5:ac:86:35:b8:77:2e:4d:ea:4d:0e:26:7e:
8d:b5:49:fb:53:13:a7:62:e8:4b:ee:6a:2c:4a:97:2a:90:f3:
13:34:d0:84:17:88:22:68:c9:19:a6:63:4f:3f:7f:01:c9:dd:
24:e4:48:be:3b:61:37:cb:9a:95:a0:df:11:85:48:3c:2d:af:
c7:2b:0c:db:f3:41:be:41:be:94:5e:1b:40:88:89:76:b6:c2:
82:a8:2f:f8:74:22:55:83:ff:aa:dd:c0:77:40:af:2c:dc:0d:
50:b9:f2:50:d1:48:4b:25:b2:bd:74:39:0b:d5:f9:1a:7f:ae:
2d:6b:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:57:02 2025 by rpki-client