Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa
File: F83786F4030011F0984B974FC4F9AE02.roa (raw, json)
Hash identifier: oVJ6kf+KFGVlCshMtWV7VqYcw7hRShoiaCLJ9n1H0t8=
Subject key identifier: B0:99:B1:90:45:C3:94:90:D1:B3:F2:39:98:A7:F5:5E:A3:73:1E:7F
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 03D1
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa
Signing time: Mon 17 Mar 2025 07:26:49 +0000
ROA not before: Mon 17 Mar 2025 07:26:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 62610
IP address blocks: 43.230.8.0/23 maxlen: 23
43.255.116.0/24 maxlen: 24
43.255.117.0/24 maxlen: 24
103.49.62.0/23 maxlen: 23
103.103.246.0/24 maxlen: 24
103.103.247.0/24 maxlen: 24
103.239.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Mar 17 07:26:49 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d7ceb9-c615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:6a:36:60:45:0f:c6:e8:16:10:07:02:ef:
6d:f0:90:2e:92:ea:95:c9:1e:6f:34:1e:34:fe:35:
6c:a9:2e:a6:b2:e7:ec:9a:1f:03:a2:2a:94:e9:d6:
de:9c:f6:45:6b:b7:67:88:c8:7d:f0:f6:0e:c6:a9:
8c:a0:aa:de:f4:68:ff:ef:a9:f3:55:a3:69:96:3f:
2b:53:63:c5:b4:be:6d:dd:99:e0:ab:c8:64:f3:24:
6c:3f:ca:f5:13:1d:68:9f:ec:e0:6f:e8:69:62:8c:
45:dc:49:8b:6c:97:d2:9e:a4:c1:96:de:3e:8b:0e:
18:38:02:3c:93:63:3c:54:86:04:be:eb:f3:49:c9:
7b:c4:4c:1b:c6:e0:a3:d7:c6:d7:bc:5e:ec:d6:2d:
a4:34:cf:3f:98:1b:eb:d7:d8:c9:1c:65:2c:41:b0:
6a:97:81:f5:8b:76:e6:8c:67:85:7d:0d:df:5d:e2:
63:a3:a8:b5:93:68:82:62:92:be:0d:d0:8c:37:1e:
72:da:d6:c0:40:98:67:bb:b5:98:24:ab:ff:6f:3d:
6b:01:82:38:95:94:1c:f5:d0:00:c7:1f:e4:9a:b5:
3c:5d:f8:63:46:03:ba:8b:d5:1c:2a:23:f1:60:0c:
7c:5b:ec:6a:80:38:84:d2:0c:02:e5:7e:66:da:61:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:B1:90:45:C3:94:90:D1:B3:F2:39:98:A7:F5:5E:A3:73:1E:7F
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.8.0/23
43.255.116.0/23
103.49.62.0/23
103.103.246.0/23
103.239.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ec:7b:18:47:28:a6:0a:3d:ce:0b:41:2a:22:4e:90:f4:08:
89:76:76:1c:6a:9d:09:41:62:9c:7a:b2:a7:a4:a4:ac:d0:5f:
70:86:20:df:32:17:34:19:ae:7c:17:6b:c7:50:af:84:5c:72:
57:60:5a:20:ff:0b:1b:13:fe:04:d0:b3:c2:73:16:aa:c8:2b:
a0:79:4b:b2:c4:33:29:d7:cb:25:b6:9b:3c:d7:08:c7:78:3d:
f8:3b:8e:5b:45:14:9a:83:15:62:02:13:90:f9:62:03:16:5a:
8e:04:b0:86:17:35:e4:24:5b:ef:b9:fa:51:17:4f:6c:a5:8e:
35:c9:b4:0c:4c:85:da:3f:84:52:a6:cc:13:b5:f7:1d:45:06:
72:3b:70:55:10:2e:b2:ba:d6:e6:94:b8:58:0e:90:e8:38:79:
4a:69:08:1a:4d:30:e4:59:36:59:6d:15:25:fe:db:64:86:f9:
40:de:c1:33:20:c8:1d:9b:8e:79:14:11:7d:cc:98:31:3f:a7:
30:36:fd:b0:db:8d:4d:5d:33:f6:00:27:e3:3e:e3:0e:61:b6:
7b:f0:63:72:a6:40:94:20:f3:47:3b:59:29:e9:00:d8:f2:34:
6a:52:46:1d:23:c0:a5:d7:76:2c:4f:d2:e0:b8:a1:f3:9e:03:
aa:35:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:54:38 2025 by rpki-client