Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa
File: 2F38972E672B11EEBA84E00CC4F9AE02.roa (raw, json)
Hash identifier: F2m4EZaWhb+L+raUozQ7KqaAu1awnSWg4wSyn9tXN5g=
Subject key identifier: A2:E6:50:9D:F1:42:7C:F0:59:C4:28:2D:CD:1C:8C:8A:93:5E:9B:A7
Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Certificate serial: 018F
Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa
Signing time: Fri 27 Dec 2024 02:16:54 +0000
ROA not before: Fri 27 Dec 2024 02:16:54 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141395
IP address blocks: 103.121.24.0/24 maxlen: 24
103.121.25.0/24 maxlen: 24
2001:df1:b640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CDC4
Validity
Not Before: Dec 27 02:16:54 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=676e0e16-352f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:81:ee:4d:f0:d4:5e:ca:6c:32:b9:7c:30:
95:39:36:fc:c8:dc:25:83:1c:89:c0:af:d9:a2:a1:
72:a1:74:d5:27:6b:f1:23:51:86:ed:18:d3:fa:37:
52:d8:5c:af:98:36:b8:07:fd:7c:07:49:06:9e:6c:
eb:c1:5d:c6:5c:0b:f3:df:1d:48:fc:07:e5:06:bf:
ba:28:db:58:df:61:90:4c:e7:f2:cb:dd:ef:14:fb:
ae:75:2d:e0:cb:3c:12:31:bd:8a:50:27:0f:4b:3d:
78:89:f0:56:57:66:bc:94:3c:76:9a:d6:45:33:22:
0d:0d:71:20:7b:a1:60:3e:9e:eb:c6:dd:1a:c1:03:
94:d4:8f:72:1a:9d:9b:05:e6:f7:4e:cd:e4:dd:4d:
3b:75:9f:9e:04:ff:5f:4c:48:e3:4d:6f:9d:b8:d5:
8e:67:f4:d8:af:03:bb:53:2b:52:1e:55:e3:5d:8b:
fe:67:43:a5:c9:dd:96:0e:27:54:f0:9e:83:af:46:
31:bd:d2:81:0d:a2:84:2f:a9:33:29:b7:85:98:c7:
73:4c:35:99:12:87:c4:81:bb:f5:20:8d:c2:f3:13:
0d:0a:41:96:99:c2:bb:49:3b:bb:55:84:a8:ce:e2:
64:92:00:8c:64:95:ab:a2:4e:a5:ff:5f:24:b4:02:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:50:9D:F1:42:7C:F0:59:C4:28:2D:CD:1C:8C:8A:93:5E:9B:A7
X509v3 Authority Key Identifier:
keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.24.0/23
IPv6:
2001:df1:b640::/48
Signature Algorithm: sha256WithRSAEncryption
08:42:6b:86:da:8a:ce:b3:b3:1c:5c:43:77:b5:2a:41:e0:11:
e4:89:a6:fd:15:2b:e1:17:0d:04:4a:1d:87:f6:b5:b9:85:b5:
9f:4f:08:07:54:77:e2:71:95:ca:52:b0:0f:b2:11:05:4a:09:
b0:b6:fa:fa:e6:f1:6b:a5:d3:24:18:2d:b8:95:30:1f:63:b0:
2d:89:53:51:8f:01:07:ee:6e:57:1b:01:9f:db:ce:3d:09:a0:
ef:e8:56:ba:a1:dc:a7:cc:eb:e7:fa:16:ff:9c:40:d6:07:f4:
b0:d2:66:f3:f5:9e:78:92:f9:b7:76:ed:f5:42:b6:b3:18:69:
9e:d9:aa:2a:27:3b:2c:63:65:06:e4:7e:45:80:98:0e:47:c4:
1a:c2:bf:0e:9b:07:45:8d:f6:e3:69:72:cb:c2:8b:8f:ce:47:
be:ae:be:0a:d4:13:6c:03:2b:88:93:2f:3d:78:4c:9e:5a:66:
c5:46:72:6d:b7:30:a2:26:3b:75:43:65:32:ea:29:cb:54:37:
6b:47:d5:c0:67:97:3a:7a:dc:be:f4:d7:da:c0:24:ef:65:57:
a7:35:d3:36:42:45:94:f1:08:b7:b9:7d:4d:e6:ef:e2:54:2e:
50:e9:9f:d5:02:1b:6d:3b:17:c5:17:ef:ce:d8:36:05:50:79:
37:d9:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:49 2025 by rpki-client