Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa
File: 18CA7386E35511EDA63D5182C4F9AE02.roa (raw, json)
Hash identifier: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=
Subject key identifier: 27:10:75:35:94:E2:43:76:0A:2D:41:EA:8C:EA:65:0E:98:67:1F:D1
Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial: 0C0D
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa
Signing time: Sun 24 Nov 2024 18:36:44 +0000
ROA not before: Sun 24 Nov 2024 18:36:44 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 134437
IP address blocks: 103.77.60.0/22 maxlen: 22
103.77.60.0/24 maxlen: 24
103.77.61.0/24 maxlen: 24
103.77.62.0/24 maxlen: 24
103.77.63.0/24 maxlen: 24
2407:8a80::/32 maxlen: 32
2407:8a80::/48 maxlen: 48
2407:8a80:1::/48 maxlen: 48
2407:8a80:2::/48 maxlen: 48
2407:8a80:3::/48 maxlen: 48
2407:8a80:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EDB7
Validity
Not Before: Nov 24 18:36:44 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6743723c-14c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:50:8c:b9:12:d2:3e:ee:07:ce:a2:fd:a3:
3c:bc:d7:de:65:47:b3:8a:83:e0:c2:35:fc:78:3f:
4f:27:93:5f:d5:fe:0a:2a:79:48:79:4e:6e:86:18:
a9:69:7d:3b:87:8f:01:2e:b7:ae:e8:8d:a2:70:b7:
c8:bb:14:12:bd:a0:10:54:66:3f:75:83:cc:23:eb:
0e:a2:4a:07:37:fa:c1:12:43:9d:58:7d:ed:06:ff:
cc:32:76:99:5d:79:42:22:53:28:9a:8d:ae:72:d5:
81:04:6b:a4:91:eb:48:90:b9:74:ae:08:68:86:14:
ca:7a:30:a7:93:d8:97:cb:e7:98:26:e4:1c:82:8c:
08:e5:cc:52:0c:87:6f:f1:da:96:96:43:69:88:2c:
29:c5:56:5e:c9:a5:7c:95:6e:45:f9:92:f5:e1:0a:
2b:db:b0:6f:15:23:8e:3a:2d:c6:04:48:38:5e:03:
19:b4:5f:0d:5c:f7:48:bc:28:be:39:35:0c:fb:79:
c6:3f:c8:87:11:e1:66:ba:a0:e5:dc:7c:16:7f:f3:
8b:f3:be:ae:d6:47:84:85:47:f1:5b:fb:4f:38:2a:
da:b9:5d:e1:98:94:66:45:32:07:ec:24:aa:79:97:
0f:16:de:66:ec:8e:87:8c:f6:7d:c4:3d:b0:9b:49:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:10:75:35:94:E2:43:76:0A:2D:41:EA:8C:EA:65:0E:98:67:1F:D1
X509v3 Authority Key Identifier:
keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.60.0/22
IPv6:
2407:8a80::/32
Signature Algorithm: sha256WithRSAEncryption
3e:84:1c:cb:7a:2a:d5:72:4f:97:c2:67:4d:ff:4a:9f:1d:6d:
a2:d4:9d:4c:57:d8:f5:2b:19:c1:de:ed:70:8e:b0:76:4d:b2:
46:f2:99:22:28:32:cb:b5:37:cc:18:be:f4:10:9d:17:b1:37:
c6:73:d4:a9:80:fb:61:22:68:ec:63:04:66:e5:fd:e6:e0:10:
d3:7e:44:b3:18:63:62:40:bc:a4:75:2b:dd:bd:45:b4:34:ee:
c3:11:42:a6:64:80:a3:be:2b:aa:a4:a9:92:c7:f1:fd:f2:86:
3e:72:2b:a4:a5:2d:c9:da:1b:6c:df:d8:15:c4:af:e0:6f:ab:
e8:1f:ae:09:b8:c0:5b:fa:fa:5c:14:66:95:ba:52:ff:99:7f:
73:28:a2:93:de:0c:bc:2d:03:14:0e:70:6c:6a:74:0f:5a:38:
19:7b:00:4a:f0:de:23:46:a4:92:c8:08:09:43:38:a4:24:58:
aa:93:f9:4c:c2:4e:f4:87:e7:54:9a:07:e8:30:64:33:de:c2:
60:46:cb:30:8f:ea:4d:e9:13:68:7c:74:c4:ec:90:b5:8d:ef:
cb:34:54:e4:b6:ae:3a:48:1c:63:4a:0c:37:63:bf:4a:8e:42:
a8:d5:bb:99:d9:d1:0b:26:f3:ae:65:77:92:ce:b9:6e:d3:8b:
4d:19:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:17 2025 by rpki-client