Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/282FB5D6AB2511EF8AA3A809C4F9AE02.roa
File: 282FB5D6AB2511EF8AA3A809C4F9AE02.roa (raw, json)
Hash identifier: 4NMcu5qwiajuXIo17nrQ8oZkoZMiXKhL54P/6cNghpk=
Subject key identifier: E0:E2:42:0F:FC:5E:55:ED:0E:94:A2:F4:CF:ED:2B:4F:DF:0E:C8:67
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 07BA
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/282FB5D6AB2511EF8AA3A809C4F9AE02.roa
Signing time: Mon 25 Nov 2024 12:02:35 +0000
ROA not before: Mon 25 Nov 2024 12:02:35 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF
Validity
Not Before: Nov 25 12:02:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6744675b-7204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:50:6d:73:f8:25:fb:3b:d8:67:ab:51:3a:
3b:80:8c:7e:37:e0:db:4e:4f:b2:df:29:e5:76:03:
e4:dd:e9:98:28:14:67:43:60:66:c3:6a:3e:06:c5:
63:34:56:da:f0:59:70:5d:b3:6c:f2:4d:48:ec:97:
1c:94:1f:14:10:44:74:c2:e0:c8:7c:7c:57:15:07:
fa:60:63:9d:4c:c7:5a:c5:75:29:ab:75:c8:c2:46:
3e:4c:15:6c:47:1f:30:b8:55:59:5a:72:59:b9:49:
8b:bb:a0:b1:c0:e1:b9:70:4e:30:70:7d:4e:6d:4c:
79:51:c1:d6:2f:bb:2f:9c:02:b8:ce:86:8b:eb:2a:
8d:2a:2b:f9:b5:46:6a:29:de:e0:dd:aa:df:51:4e:
76:fd:ab:1b:05:8d:a3:23:b4:c9:11:e6:49:7b:c7:
33:ed:62:1e:b1:ae:cb:8b:d7:a0:74:84:0e:b7:98:
54:8b:1d:ae:11:1f:ec:ac:ea:d8:f4:c1:a1:01:7b:
cd:9e:1f:72:5c:05:e5:89:04:2a:0e:ca:ef:c1:36:
4a:8a:05:97:2f:b4:44:c4:76:7e:22:b0:4c:17:79:
26:5c:dd:9b:2e:f4:6c:67:b1:e7:e0:71:cb:3d:06:
3f:ab:5a:38:b0:fe:ad:eb:37:87:8d:47:8c:16:fc:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:42:0F:FC:5E:55:ED:0E:94:A2:F4:CF:ED:2B:4F:DF:0E:C8:67
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/282FB5D6AB2511EF8AA3A809C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.101.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e4:76:05:b5:3a:81:7b:67:51:43:fc:0a:18:ca:96:13:33:
b1:9e:f5:bd:43:9b:af:cd:84:95:1b:12:ea:a0:8d:99:9d:42:
12:09:c9:ad:dd:93:cc:1e:f6:7a:2c:62:9d:91:ae:61:fd:f4:
3f:70:0a:a1:53:fc:64:11:e3:f8:19:8b:1b:2b:ab:90:b3:63:
0a:09:d6:1c:d1:0b:71:a3:2a:8b:d7:30:98:5a:6c:df:67:ef:
2d:c9:da:e2:b5:8c:dd:99:f7:de:61:ab:c8:4c:d2:38:26:4d:
55:f7:ea:8c:06:73:e2:f6:37:b5:6a:20:19:a9:12:f9:de:3f:
83:6a:7d:d3:1a:d9:19:f1:93:dd:e5:bb:de:03:e4:ce:c5:6d:
09:21:9d:38:8d:34:65:c5:b7:43:53:59:eb:89:03:1f:ef:ff:
31:e1:7a:03:58:ca:7d:5d:76:84:d3:8b:48:04:01:55:db:e0:
35:16:d1:12:e7:07:3b:ae:a0:06:82:6c:7e:c7:a8:25:d9:20:
43:25:3f:48:b7:b8:d8:9a:0f:e0:cd:ec:e2:7d:0d:f1:9b:fd:
9f:60:c5:ce:20:0a:d8:a1:09:bd:fe:a8:ef:da:bb:10:e3:f1:
97:74:43:f6:a1:52:8c:bd:08:5d:bc:82:fb:22:d7:7d:75:69:
c6:1d:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:22 2025 by rpki-client