Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa
File: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (raw, json)
Hash identifier: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=
Subject key identifier: 9D:C6:DC:A1:A6:C5:9A:89:FF:42:25:00:09:D5:5D:01:D4:74:EC:04
Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial: 03A3
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa
Signing time: Tue 11 Feb 2025 00:43:33 +0000
ROA not before: Tue 11 Feb 2025 00:43:33 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149491
IP address blocks: 103.181.24.0/23 maxlen: 23
103.181.24.0/24 maxlen: 24
103.181.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BBE1
Validity
Not Before: Feb 11 00:43:33 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67aa9d34-6487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:24:7c:60:a0:00:dd:20:77:9a:42:27:1e:
8e:f1:7b:26:30:14:1c:94:74:37:29:17:91:2c:cd:
03:9c:9e:62:22:48:11:1f:e1:6d:90:11:ba:40:39:
24:6c:cf:f1:68:4a:f5:0b:6c:71:1f:18:20:32:f7:
7f:d0:a9:9e:58:83:f6:a3:41:9f:bd:e9:dd:88:81:
d4:ed:90:bd:f7:6c:e0:16:d5:94:c2:db:39:d6:90:
05:72:0c:ad:4a:b4:e4:49:95:d9:15:e2:73:9a:a6:
e5:8f:cb:d6:a5:fd:49:a0:98:b3:30:60:e3:d5:eb:
29:e4:9b:56:8c:3c:f7:03:f1:db:d8:26:f6:07:1c:
72:0d:f0:f8:7a:0e:55:75:85:0c:d9:c8:35:d8:44:
f0:aa:70:16:0f:e5:b7:6d:0c:1e:3c:b2:a4:63:80:
e2:86:4b:95:f5:51:d4:8d:11:cc:6b:65:c3:69:8a:
db:c1:10:4b:2e:e2:2a:c2:3c:de:bf:86:a6:c3:b9:
5c:64:a0:38:e1:4c:2c:ac:4c:ec:63:7a:b9:5d:f3:
67:08:17:8b:10:12:3d:7f:2c:24:9d:f6:ff:0f:7c:
77:9a:f4:35:4f:86:8b:db:ac:f7:cc:fc:ca:e4:47:
bd:78:0d:2a:c5:41:e5:68:be:e3:b3:43:9e:04:a3:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:DC:A1:A6:C5:9A:89:FF:42:25:00:09:D5:5D:01:D4:74:EC:04
X509v3 Authority Key Identifier:
keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.24.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:57:ec:18:fc:9e:20:20:b0:c8:8c:99:38:90:a1:0c:e8:88:
0d:fe:d3:55:9f:66:d5:21:0d:50:d6:34:35:ca:2a:22:bf:fa:
2e:81:16:18:44:ba:dc:82:c2:7e:21:d1:d8:8d:78:d4:f8:e1:
c7:df:a1:7a:ae:c1:c2:11:b6:28:55:fa:9d:1e:09:6c:c4:54:
c5:cb:b3:37:a1:93:39:da:41:f4:98:5b:34:29:9d:8c:2a:cc:
53:84:25:54:06:9c:4c:f8:93:93:8b:2e:39:e9:da:5e:47:e0:
1a:5b:74:c7:fc:ca:5c:9a:2f:e8:8a:01:f6:5a:e8:04:2c:4f:
03:6c:7f:4b:27:d0:7a:8e:59:8b:fe:7d:a9:ea:eb:d3:6b:43:
e8:d9:0e:8d:1f:0f:2d:4c:cf:0d:0a:ae:25:2f:5d:7b:fd:f3:
2a:89:95:c0:71:df:99:9b:7a:64:d5:3d:67:2c:fc:fc:af:ad:
33:e4:1d:d1:cd:a7:98:59:70:e7:8a:2e:3a:1b:a2:b4:04:cd:
0d:de:a6:ef:22:8f:e3:ef:ea:41:b2:15:c0:ac:8e:8f:aa:c8:
c9:5e:e5:8d:94:1f:fe:d4:05:39:84:47:5f:aa:70:f6:5d:cf:
dd:30:24:05:18:e8:22:4d:8c:f0:7f:53:dd:05:69:3f:52:08:
09:2c:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:04:20 2025 by rpki-client