Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
File: A20DDFE2725911ED8CB4D763C4F9AE02.roa (raw, json)
Hash identifier: YLNPavuZCOudMxVfyqmjZm9NJz/Z+dCM3fPBM36z61c=
Subject key identifier: 62:55:91:08:2B:58:54:89:90:99:3D:09:7F:57:16:14:92:43:B9:3B
Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial: 0180
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
Signing time: Tue 17 Dec 2024 02:15:50 +0000
ROA not before: Tue 17 Dec 2024 02:15:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 63526
IP address blocks: 103.48.160.0/23 maxlen: 23
103.48.160.0/24 maxlen: 24
103.48.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E77C
Validity
Not Before: Dec 17 02:15:50 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6760ded6-ab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:b1:17:9e:2a:15:e0:36:24:ff:a9:39:0b:
4b:9b:d7:7b:2e:ee:8e:c3:3c:b4:d7:14:33:52:52:
65:73:ef:4c:4f:7f:e0:02:3b:b4:bd:d0:8b:5a:b6:
73:8d:b7:68:5a:30:7b:6c:18:57:53:b1:48:29:81:
e8:1e:84:c6:a2:cd:25:94:b8:45:7b:1f:e6:55:37:
21:36:ea:df:16:7c:9a:fd:42:29:42:bc:52:cb:f4:
64:5f:d3:1b:27:27:7c:97:fc:ad:ae:c4:14:29:51:
aa:42:f4:74:97:5e:fb:a8:5a:bb:c4:8d:4a:22:4d:
9c:d0:2c:08:55:85:8b:b9:2f:bb:2d:a0:5b:2f:ec:
47:41:ad:b5:95:56:61:50:e5:42:36:c1:59:57:24:
b7:ff:ef:83:75:4d:e6:ac:d9:9d:43:ce:bb:60:bb:
d7:64:c4:fa:bb:1f:53:69:80:d4:ff:f9:76:bc:f9:
e2:7e:31:25:23:c9:4d:6e:d0:b3:9c:c5:9c:86:90:
a4:cc:f8:88:ff:c6:ad:14:d6:53:37:51:12:31:70:
e5:1a:f1:95:59:81:2c:93:f4:ab:ba:6f:82:a0:9b:
b1:9e:00:6c:7d:84:f0:95:c0:f1:1f:5f:e7:a6:8d:
99:14:8b:26:d9:58:a9:01:a0:9d:bb:20:68:98:15:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:55:91:08:2B:58:54:89:90:99:3D:09:7F:57:16:14:92:43:B9:3B
X509v3 Authority Key Identifier:
keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.160.0/23
Signature Algorithm: sha256WithRSAEncryption
75:14:66:b6:4c:79:69:82:0d:05:63:dc:78:c9:cd:9c:1c:df:
06:e4:80:07:ea:c3:ec:ec:fa:c5:47:5d:5e:de:29:c5:a5:33:
66:ed:aa:9b:65:49:ba:e7:65:dd:c9:76:e1:bd:b7:98:88:17:
c2:d4:86:04:fe:a3:0c:de:fd:69:e9:a7:a4:b8:0d:5d:63:5b:
20:77:d1:00:84:c5:2d:21:7b:40:e4:46:9f:a1:d7:97:80:0b:
48:ef:e6:7c:2e:b9:47:90:d9:83:63:c6:50:3b:88:88:95:9c:
3b:20:27:f8:d2:14:ac:60:f8:ae:cc:24:f0:0f:33:3b:b0:0b:
10:ee:ae:b7:6c:e4:44:de:96:e5:08:b3:0b:32:e8:bb:9f:ab:
d2:49:7b:e5:ea:7a:24:ae:bb:c5:f0:86:85:41:27:a7:c1:54:
29:ef:eb:53:eb:4e:0c:07:64:15:69:db:39:76:27:8f:f9:5f:
bf:e8:87:93:7f:1c:b7:49:7c:03:f0:94:b5:c4:1b:9c:3e:b0:
e3:26:ec:2a:ac:df:48:63:16:8f:8e:bd:a1:4c:b7:0b:c8:dc:
41:90:05:69:e7:b8:b4:8c:26:24:bb:a2:bc:f5:f5:2e:eb:59:
1b:44:18:b1:9e:0c:c5:27:2d:c7:bc:ea:b4:3b:b3:74:16:ac:
b7:af:ec:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:23 2025 by rpki-client