Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
File: 04679AF66F3411EF833F4C23C4F9AE02.roa (raw, json)
Hash identifier: lMcw8S12urhXxI0eoOsXqOKcaqH3ZsED3AjjGI9Ju6s=
Subject key identifier: 18:0F:C3:99:A0:A6:8E:76:B4:AB:1D:D6:F6:E3:FC:41:6B:2E:CD:A0
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: 6E
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
Signing time: Tue 25 Mar 2025 06:13:22 +0000
ROA not before: Tue 25 Mar 2025 06:13:22 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138662
IP address blocks: 103.135.246.0/24 maxlen: 24
103.135.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2
Validity
Not Before: Mar 25 06:13:22 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e24982-c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:78:4a:12:ce:01:a2:da:ec:65:2e:9c:1c:
ef:8c:72:a2:86:54:34:ae:86:ff:b6:12:23:9a:ec:
b9:fd:e6:75:2c:64:36:4b:f6:35:2a:df:7e:a7:01:
af:cc:c1:8c:fd:4c:cd:72:c2:dc:99:12:5c:a8:7b:
c4:03:93:b6:e4:67:41:bb:1d:16:96:af:80:36:da:
45:f1:1b:80:21:f6:7a:43:34:c5:14:30:69:cb:91:
fd:d4:05:5f:f2:f5:9a:1f:dd:ef:f5:fb:6d:a3:54:
cd:23:92:5c:65:42:f3:21:d5:eb:ce:e3:9b:90:64:
52:c0:60:0f:62:32:b6:68:d0:97:0c:dc:ca:c7:58:
96:6a:b2:44:99:a6:67:95:15:14:b6:a2:fe:74:5f:
3d:12:61:66:8f:83:fb:55:34:49:4e:1b:2f:d6:23:
62:f9:0b:68:15:49:fd:35:47:8e:c4:a1:cb:71:6b:
d7:c7:a8:c1:a2:f3:e2:6a:b7:35:bb:89:60:46:71:
b4:c3:fe:34:55:0a:ce:38:70:b9:03:47:ad:e6:4f:
13:5b:0c:22:7f:41:2a:f0:82:ab:b4:a4:1c:fe:41:
57:d4:68:7c:0d:53:12:10:52:a5:bc:47:87:b4:a6:
d3:27:b0:73:91:8c:c7:23:0c:d7:0c:7d:67:0c:4f:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:C3:99:A0:A6:8E:76:B4:AB:1D:D6:F6:E3:FC:41:6B:2E:CD:A0
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:09:b0:a3:09:0a:75:2e:32:75:5e:2e:54:91:00:bc:43:6b:
29:4c:cb:b0:40:29:74:d4:17:1d:71:48:12:e9:27:b7:3f:58:
45:7e:cf:16:c7:76:d8:4a:fd:c2:31:36:c6:7a:34:dc:f0:84:
0b:16:9f:74:d5:55:9c:5f:9a:7f:66:84:eb:98:d0:24:0c:37:
04:83:51:a3:04:5c:e0:7d:8d:16:e4:ba:7d:8f:95:09:a5:3f:
2b:20:d2:c7:24:12:7e:9f:20:49:4f:68:12:a7:41:5d:c5:ae:
c6:ad:37:c2:d7:6f:e5:28:91:f1:01:ef:40:53:62:3a:fe:e5:
af:70:8a:4d:32:b7:02:18:56:36:e8:23:8e:e1:25:ca:71:2a:
41:3b:ed:ea:46:7c:17:64:b4:1e:33:31:05:77:a2:bc:4c:0d:
d3:7a:01:aa:13:ea:49:a7:45:19:a2:67:61:66:ef:4d:ef:83:
ef:b1:19:41:c3:a2:6d:6c:ce:13:da:30:49:ec:5f:1a:8f:a6:
a9:56:2f:9f:e0:af:16:7b:c4:d3:90:47:fd:10:00:ac:d7:12:
b3:5d:03:cc:09:2b:32:4d:36:ea:b4:df:8e:d8:5c:86:93:42:
86:82:c2:c1:a3:1b:9f:73:19:5b:3a:a8:03:bf:ba:30:a3:fd:
85:cc:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:57:55 2025 by rpki-client