Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa
File: 8BF809E4892411EDBAF42C12C4F9AE02.roa (raw, json)
Hash identifier: eXbmOFmMxcvm0Xsyzg3/1U2kY3p0kjNdosXsryg+sqE=
Subject key identifier: 0A:D0:40:A4:BB:F5:4C:92:59:79:13:8C:83:23:9C:BD:B8:FA:35:30
Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial: 0447
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa
Signing time: Thu 07 Nov 2024 00:03:07 +0000
ROA not before: Thu 07 Nov 2024 00:03:07 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150683
IP address blocks: 103.174.4.0/24 maxlen: 24
103.174.5.0/24 maxlen: 24
2400:7360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E791
Validity
Not Before: Nov 7 00:03:07 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672c03bb-efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:1d:7e:ed:c8:38:bc:86:6a:9b:4d:26:cd:
d7:f8:67:4a:e6:41:8f:5c:5d:04:a7:33:b5:b0:3c:
c4:07:d7:13:4c:66:79:59:2f:20:b6:1a:e7:8a:43:
4f:94:35:f3:91:53:e9:3d:17:bc:e7:0e:cb:8c:45:
78:96:09:0f:aa:15:38:66:a6:9a:98:54:57:29:60:
df:98:86:c2:4d:ee:10:fe:f9:d5:96:d4:0e:d4:8b:
5f:35:bf:9b:52:ed:24:2b:e2:68:c5:e8:11:47:94:
68:6e:fa:78:e4:37:38:40:20:cb:78:c7:93:e1:5d:
f9:12:7c:ec:d1:8c:03:58:21:d1:71:ed:2f:26:c7:
90:72:d3:67:ad:13:51:a2:cd:06:01:1d:98:d0:51:
98:e2:64:2c:c6:86:35:5c:30:22:01:21:79:52:37:
a3:a7:62:39:e4:ce:31:51:f4:fd:90:67:f0:01:40:
f1:7c:04:f3:21:6c:96:aa:fd:0a:29:8a:f2:e2:06:
0d:4f:53:03:56:6c:e2:ed:0f:a2:68:c2:76:0a:c1:
1c:3d:4f:14:d3:a1:f8:f1:56:82:e0:b8:cf:4a:33:
79:85:e2:e5:79:c6:13:91:dc:3f:67:d1:2e:11:3c:
aa:f4:f9:3d:c6:2a:33:3b:0c:3d:8c:8c:ae:e0:99:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:40:A4:BB:F5:4C:92:59:79:13:8C:83:23:9C:BD:B8:FA:35:30
X509v3 Authority Key Identifier:
keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/8BF809E4892411EDBAF42C12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.4.0/23
IPv6:
2400:7360::/32
Signature Algorithm: sha256WithRSAEncryption
9f:7b:a2:c3:fc:91:39:9d:b6:60:10:fb:3a:b7:e9:bf:a5:18:
b1:de:c5:3f:c6:90:ef:47:b1:af:e8:8d:50:20:09:0c:1b:2c:
5a:f5:01:55:c4:fe:95:ba:e7:78:79:48:43:16:3c:5e:db:6f:
d1:97:6a:0e:be:54:ac:c7:ed:6e:41:fa:d7:00:d9:63:ee:0b:
69:f8:70:cb:10:53:d4:0f:95:20:7f:f0:17:2a:44:5c:ae:81:
29:d0:5b:de:aa:3a:32:21:33:c3:09:4c:cd:98:d8:01:6c:e4:
9a:ef:6f:0f:3a:5a:2f:08:bd:1b:ba:40:9f:23:0d:9b:b9:7f:
39:4a:c0:92:d8:84:96:52:86:18:b9:16:a0:ef:1f:63:3f:a1:
cd:d2:0e:e2:94:56:ba:95:db:53:a8:20:cd:00:d1:38:df:07:
3e:8c:0b:45:1d:ba:4f:c5:10:23:2c:db:d4:21:58:1e:eb:cd:
2f:ab:49:4e:2c:45:96:5b:7d:cf:c2:d7:f2:dd:00:12:44:1b:
55:05:4b:ad:cd:17:3c:ce:be:09:83:f7:be:eb:74:cb:b0:a1:
2c:0d:db:48:c7:c0:34:2f:96:78:5e:62:b7:70:c9:2d:8b:5e:
c1:29:53:d2:e4:b9:4f:52:d0:e7:72:0c:a5:1c:ab:66:67:59:
d9:2a:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:11:34 2025 by rpki-client