Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa
File: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (raw, json)
Hash identifier: y48q8nHX1JhR9dequdXIPjSajeit5DAhtA6kzockY/Y=
Subject key identifier: 93:8B:D9:18:60:44:39:D0:2F:ED:28:49:BA:FF:1C:E1:9F:04:1C:EE
Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial: 6F
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa
Signing time: Tue 25 Mar 2025 06:13:23 +0000
ROA not before: Tue 25 Mar 2025 06:13:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17477
IP address blocks: 103.135.246.0/24 maxlen: 24
103.135.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A8E2
Validity
Not Before: Mar 25 06:13:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e24983-8f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:c2:b0:fc:5c:f1:58:3f:92:d0:c1:b1:37:
b3:c4:99:59:bf:f3:be:15:bd:ea:17:c6:45:1c:ee:
73:49:64:8c:d9:1b:b9:9f:08:fa:9b:ef:88:6c:5c:
f0:58:9c:55:50:8b:54:0f:8f:75:59:36:e5:fa:52:
ee:69:62:e9:25:2e:ab:db:ce:87:45:04:5c:25:70:
80:08:72:a0:a0:da:d6:cb:71:c3:6c:a9:08:de:5f:
40:c3:01:f9:a3:e3:e6:c9:c6:a2:5d:b2:34:63:59:
82:a9:ef:88:8f:bc:68:63:2b:df:3b:29:75:89:90:
0f:4f:70:5e:50:b4:74:68:fd:de:30:69:93:bd:21:
c5:79:bd:8c:a6:4c:fd:4f:56:8a:d5:19:38:3d:fb:
92:32:fd:72:03:9d:35:55:ea:5f:76:fd:a5:69:19:
03:d0:ed:5e:e8:17:6a:2a:25:9a:86:03:77:b6:a9:
0c:06:22:fa:3a:89:7e:93:c4:23:94:76:80:88:00:
f2:84:d5:a5:5b:db:c0:c8:ca:1c:3d:8c:f8:2e:d4:
a7:81:c7:f1:c9:4b:73:df:0d:a8:1b:f7:26:66:a5:
58:8b:85:f8:ce:30:9a:e7:a9:ee:97:57:2f:e9:b7:
f0:bd:71:93:70:7f:a9:29:f7:49:98:a8:50:31:86:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:D9:18:60:44:39:D0:2F:ED:28:49:BA:FF:1C:E1:9F:04:1C:EE
X509v3 Authority Key Identifier:
keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04EFECDA6F3411EF833F4C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f8:75:2c:22:36:02:e9:70:12:e8:2e:3a:1b:35:69:1a:97:
ed:04:c6:51:c2:b8:63:76:1c:58:49:7e:50:40:1e:38:c6:a2:
7c:3a:7a:aa:94:4a:54:f4:65:74:78:bb:d1:86:c5:5d:99:6c:
72:96:eb:05:ac:c2:a8:3c:5b:b6:33:75:a9:6f:d6:2e:4e:e9:
3d:cb:07:fc:c3:08:61:0e:4b:5b:f4:cd:1d:8f:8e:0e:de:a5:
02:9e:5e:12:14:7b:fb:56:54:22:94:7b:8b:96:ee:66:88:b0:
26:71:58:9d:5d:ef:77:15:98:87:c0:aa:fc:eb:30:2c:82:5b:
5d:35:1a:cc:8e:5e:69:dc:9c:50:38:b7:ed:45:ed:47:7c:21:
a5:44:dd:5a:65:0b:d4:cc:40:07:9d:e2:b9:b1:80:9f:d0:64:
30:9e:ca:02:9a:9e:3b:e5:04:1f:9f:d6:35:d1:68:00:e6:29:
3e:38:93:32:a3:aa:16:4d:6b:50:02:5d:bf:ef:b9:a0:90:43:
4a:3d:14:92:46:36:57:38:00:ad:cc:ce:7c:30:db:8f:bd:ab:
af:75:50:05:41:42:5a:60:19:7f:f3:8c:87:23:75:b5:d6:1b:
af:82:91:63:36:c4:9c:d7:8a:e0:bb:95:6b:27:c9:a9:0a:67:
a7:41:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:00 2025 by rpki-client