Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
File: DBC08AD4457911E9BA84DA51C4F9AE02.roa (raw, json)
Hash identifier: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=
Subject key identifier: 2C:6E:11:38:69:65:FB:FD:0F:A0:0E:AF:2C:FB:E1:85:BF:20:C8:37
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 0FBA
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
Signing time: Tue 18 Jun 2024 19:00:30 +0000
ROA not before: Tue 18 Jun 2024 19:00:30 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132277
IP address blocks: 103.12.2.0/24 maxlen: 24
103.96.108.0/24 maxlen: 24
2001:df0:2ba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4026 (0xfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B
Validity
Not Before: Jun 18 19:00:30 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6671d94e-501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:31:4d:d9:46:02:3d:47:16:fd:49:40:f9:
27:2c:c0:c8:82:b5:7e:ab:30:2b:dd:c1:6d:eb:8d:
8b:e6:38:86:a1:f4:24:62:f7:a9:08:f9:8f:95:3f:
d2:32:fe:03:f2:30:d6:f8:02:82:10:62:23:9a:92:
44:12:18:4c:e8:cf:70:71:32:13:01:84:2f:97:a6:
76:df:1e:c9:38:27:9a:2e:55:0c:df:51:8d:4b:14:
37:95:52:24:d8:89:e5:b1:f0:1a:ce:c2:12:6b:b8:
fb:0d:9d:d4:1e:b8:98:0c:a6:66:7f:6c:14:80:6e:
36:1a:60:a2:55:e0:e0:fa:27:2a:76:5d:ae:6b:4c:
9a:a2:01:86:3b:2f:58:65:2a:bd:62:c0:bc:6c:42:
20:6f:5c:37:95:9e:e2:99:ca:01:ed:c3:eb:74:4f:
d0:48:57:12:7f:15:7d:86:a4:76:b2:9b:71:98:c0:
5e:87:6d:a4:ac:8d:36:13:c1:fb:30:9f:2a:6e:23:
ce:3e:fe:5f:94:27:0f:1f:a6:b3:fe:ea:e7:12:3e:
2a:20:a7:44:4c:3d:84:06:68:31:02:f2:c8:96:26:
37:1b:25:20:a4:32:bd:77:0f:b1:34:3d:25:a6:e4:
e1:96:f9:70:af:7b:cb:77:c2:7e:1d:9d:24:20:f0:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:11:38:69:65:FB:FD:0F:A0:0E:AF:2C:FB:E1:85:BF:20:C8:37
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.2.0/24
103.96.108.0/24
IPv6:
2001:df0:2ba::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7a:e4:f0:69:e6:0a:14:48:58:a8:e5:85:d7:30:68:fe:b0:
d2:74:d1:8b:59:06:99:52:48:7e:63:a7:b6:35:83:36:eb:cc:
2b:07:4c:60:51:21:97:ac:0b:6e:d0:6c:b4:91:bc:42:98:e2:
6b:3f:2d:1d:d7:ef:e3:01:f7:9b:22:91:bc:dd:f8:e4:a9:24:
95:7b:2f:23:cd:a1:95:b6:fc:19:c1:ce:44:1e:2d:c8:55:9a:
7b:9d:a7:35:42:e8:52:97:87:80:10:54:bd:ea:28:1d:ae:89:
86:b6:cb:1d:92:0b:ea:76:b3:e4:ee:be:d8:70:ff:82:f7:56:
35:c2:0e:18:27:06:d8:28:b0:ec:da:72:60:65:43:60:58:b9:
d0:9c:27:26:a8:6b:2e:c8:46:c4:ef:c6:58:c4:84:55:a4:07:
1f:27:6f:77:88:ce:61:19:0a:6d:38:ec:a1:0b:86:e0:8f:75:
fa:25:e2:66:52:a4:d4:ac:ae:50:68:e8:18:c1:74:33:fb:20:
4d:39:fb:85:32:8d:58:ac:21:0a:f1:3d:10:7b:ee:f9:1d:14:
41:a6:0b:3e:15:18:9e:f3:ef:d0:52:fb:7a:04:e4:32:c4:60:
ec:0f:f0:e9:d8:c0:09:a4:f8:64:00:b6:66:fc:1b:ec:71:ed:
b0:77:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:37 2025 by rpki-client