Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa
File: AF57B9EC2F7811EABC011040C4F9AE02.roa (raw, json)
Hash identifier: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y=
Subject key identifier: 38:37:0A:8E:35:3D:32:84:C1:68:9D:D3:EC:91:68:EF:1A:22:8D:E9
Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial: 0AAB
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa
Signing time: Fri 10 May 2024 20:29:41 +0000
ROA not before: Fri 10 May 2024 20:29:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138904
IP address blocks: 103.136.236.0/22 maxlen: 24
2001:df0:f80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912614B
Validity
Not Before: May 10 20:29:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=663e83b5-2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:d7:a9:8b:9e:e1:51:d9:7a:b2:fd:fa:04:
fd:2e:a7:f3:bd:b7:13:d6:95:7f:7c:2e:aa:80:b3:
42:33:09:87:fc:fa:e1:3f:73:e7:12:53:6d:ef:ae:
e1:2d:b7:be:2b:4e:5b:d6:bd:34:35:bf:e8:c5:01:
80:64:20:3b:53:d0:a8:1c:3c:02:08:cf:67:76:6b:
27:d3:51:1e:bd:82:28:6d:ec:c3:24:2d:e7:08:4e:
f1:f5:95:6d:e0:0c:48:d3:ce:27:25:4b:93:59:13:
13:11:2e:f4:8b:cc:60:f4:3c:c7:31:a7:7e:7f:c2:
bc:fa:a4:c2:dd:d2:dc:98:b9:80:46:75:6c:28:6d:
c0:d2:ec:7a:a8:14:39:c6:21:ab:c5:d7:51:2d:3c:
d8:9e:bb:d2:06:21:db:a8:4f:2d:e0:a4:ee:0e:4d:
bf:b7:89:0d:ad:34:8f:43:b3:cb:ce:62:8f:6a:27:
e2:5b:c7:2e:ba:3c:a1:d4:23:7b:71:aa:d1:ee:a9:
e1:b4:15:97:5e:90:bd:53:6d:84:63:41:6c:32:02:
fc:13:b0:98:32:20:61:12:76:ea:1c:84:32:e3:39:
30:39:cc:59:67:f6:42:fb:ce:7b:d3:9b:8d:14:2a:
05:da:90:f8:15:c6:b8:d1:c8:f2:ef:c7:90:dc:f8:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:0A:8E:35:3D:32:84:C1:68:9D:D3:EC:91:68:EF:1A:22:8D:E9
X509v3 Authority Key Identifier:
keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.236.0/22
IPv6:
2001:df0:f80::/48
Signature Algorithm: sha256WithRSAEncryption
12:11:0f:f8:b3:77:66:ad:58:f2:ac:fc:f3:0e:b4:cd:ad:66:
b4:1d:0e:39:93:bd:0e:19:e0:8e:a3:14:4c:d5:ff:80:87:d5:
58:cc:4a:23:89:1a:8c:b1:d7:9c:9b:b2:c0:40:0e:a9:3b:d5:
b2:ff:1e:79:f6:bd:d3:4b:a0:bc:65:82:e0:58:c5:db:1a:ad:
3a:69:ae:4d:7d:cc:2f:90:93:9c:89:5e:c8:05:9e:a6:66:5a:
b9:36:06:bf:a8:d8:b9:00:78:01:a5:ea:c3:aa:d4:92:9d:9b:
c7:3a:65:44:b4:0e:e1:8f:9c:72:ef:fc:dc:5c:d2:5b:f9:7e:
af:07:d0:2d:c1:a7:02:bb:9b:7a:b4:fa:c7:a4:9a:75:65:cc:
8b:f6:9e:3e:9b:67:ba:e4:5e:22:3d:d9:95:1e:03:10:b9:34:
e5:10:45:87:cf:a4:ea:d7:5a:88:af:ca:c3:91:6f:08:6c:2b:
84:2e:a7:7a:8a:55:22:e8:07:7c:79:79:0b:8f:4c:ca:0f:4d:
20:58:a5:05:85:ad:73:62:0f:45:c3:ca:97:ff:c6:61:14:ae:
e8:42:47:c9:7a:94:05:21:2f:42:7f:b5:8d:70:22:d9:03:eb:
f1:29:fb:3d:80:63:84:42:92:20:86:0a:52:bc:a0:10:cb:3c:
11:db:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:57:33 2025 by rpki-client