Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
File: DBB62584510F11EE91E98858C4F9AE02.roa (raw, json)
Hash identifier: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=
Subject key identifier: DE:D5:02:77:C8:AD:DC:9F:53:17:99:F2:34:D9:05:90:AC:97:07:52
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1CB7
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
Signing time: Thu 02 Jan 2025 16:13:37 +0000
ROA not before: Thu 02 Jan 2025 16:13:37 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136133
IP address blocks: 103.81.52.0/24 maxlen: 24
103.107.226.0/24 maxlen: 24
103.107.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7351 (0x1cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A
Validity
Not Before: Jan 2 16:13:37 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6776bb30-df04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:cb:53:99:c8:39:7a:62:02:d4:ca:91:27:
6e:53:dd:f6:f4:54:80:45:97:65:13:51:68:7b:a9:
34:d1:34:eb:f8:32:b6:de:27:ff:fa:05:49:1f:fe:
01:f3:6d:96:cd:d6:f1:f7:86:87:2f:f7:19:e3:e8:
f8:03:54:79:66:dc:ff:c6:4e:81:bc:1d:e4:61:bb:
64:ea:e6:a4:69:3f:be:08:44:d4:a8:97:bb:56:68:
11:f7:f4:cf:31:e8:71:d9:87:65:56:37:5c:7e:e8:
0e:73:13:1f:18:10:d8:c4:8f:0f:e9:21:87:9a:47:
7e:7b:14:65:9c:99:fa:10:b3:34:71:2f:43:bb:ee:
cc:0c:9a:2c:12:d6:99:65:3e:bc:5f:8d:cd:8a:79:
18:01:d4:0f:9d:6e:ea:52:33:8a:55:ea:50:94:3a:
5f:99:b6:7b:61:32:cb:45:70:ac:e2:fe:fe:76:6a:
8f:be:a2:6a:5a:11:54:af:36:ca:69:84:c9:ea:9d:
41:c5:4f:b1:66:a8:56:11:49:22:b2:51:16:ad:f4:
82:40:db:5b:da:fe:3f:f2:38:ce:19:d4:7d:a9:8a:
f3:8e:68:f0:a4:06:8d:c6:fb:80:62:1b:35:a1:89:
40:49:35:53:d8:d3:09:0e:81:47:85:43:3e:e4:c4:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:02:77:C8:AD:DC:9F:53:17:99:F2:34:D9:05:90:AC:97:07:52
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/DBB62584510F11EE91E98858C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.52.0/24
103.107.226.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a6:22:2a:fd:bc:d1:41:d6:db:00:51:42:aa:66:e3:6d:c6:
8f:c2:0b:76:2a:51:c6:9e:c8:15:df:35:46:89:e2:3e:c9:2e:
c8:95:bb:90:e4:3b:45:1f:8a:b5:45:bf:df:61:20:5c:ef:16:
b7:ba:4c:92:06:eb:47:c5:fc:9d:73:e4:fc:12:71:40:2b:5c:
6b:99:63:0c:92:20:df:cf:f3:bb:9e:32:41:f7:27:71:02:ac:
85:05:c4:24:9a:ae:5b:9c:db:92:b7:0c:cd:e2:bb:ce:76:83:
1a:1e:32:78:45:bb:94:6e:9d:37:90:44:b0:dd:d7:ee:f3:b7:
38:fc:80:22:1d:08:c6:45:1f:4b:6c:31:0c:14:9d:c4:31:3c:
5b:8d:5a:84:e5:95:ef:aa:52:0d:2c:f4:77:d0:f2:fe:9e:44:
5a:73:e9:4b:07:be:cd:f1:57:b9:2b:81:1a:ce:fa:76:a7:9a:
2e:27:c1:ff:9f:ef:98:08:aa:32:27:0e:29:93:d2:4d:ca:a4:
96:ec:b6:27:36:f0:b1:4b:cb:d7:65:07:df:c5:98:e5:49:96:
bc:60:51:1f:94:72:55:68:29:dd:86:80:a6:b6:96:93:8d:98:
58:35:ca:e7:57:57:af:86:60:11:ed:2d:d5:36:4f:39:bf:5e:
c9:7d:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:33:45 2025 by rpki-client