Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
File: E6054D96F3CB11ECA86DCE60C4F9AE02.roa (raw, json)
Hash identifier: PELmNyhpg0raHsA7GFw1TRNGLjn8BhP7w+wplytqqsg=
Subject key identifier: 66:0E:BF:0C:87:CD:5F:A8:C7:9D:01:13:95:90:4B:77:EF:7A:9F:AC
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 02B4
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
Signing time: Thu 13 Mar 2025 01:27:07 +0000
ROA not before: Thu 13 Mar 2025 01:27:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9009
IP address blocks: 36.255.97.0/24 maxlen: 24
103.209.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7
Validity
Not Before: Mar 13 01:27:07 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d2346b-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:72:d5:e6:73:bd:74:54:f6:55:15:ae:0a:
eb:10:be:98:b0:ee:d0:59:38:81:8e:d5:de:89:93:
6f:aa:1b:6f:3b:33:fa:67:14:30:e4:9a:fa:9e:5b:
39:66:03:7b:83:c3:2a:3d:5b:44:ce:2f:3e:bc:2b:
59:73:1c:12:58:78:60:5b:20:3e:2f:80:40:8f:35:
c2:0e:09:02:ff:22:fc:85:e6:07:0d:28:05:74:df:
b2:9b:a7:eb:97:1d:2e:6b:46:45:84:10:68:d9:05:
4b:83:d7:fd:fa:0b:33:50:dd:c4:d7:57:31:59:9c:
4a:8b:a7:cb:87:e6:dd:32:c8:59:53:ca:7f:2e:63:
69:3e:6e:ef:35:38:4b:0b:92:8b:56:b6:ff:38:55:
7c:ac:1f:dd:bc:16:64:b9:7a:b7:fe:16:cd:3b:2b:
8b:58:c9:0e:52:78:94:8c:10:50:db:55:e6:ff:96:
94:d7:b6:c5:be:66:da:6a:90:3a:95:82:74:7a:e6:
4f:9b:d4:6b:7b:31:7a:e9:e8:39:45:df:bf:b1:08:
b4:9b:33:3c:e6:f4:05:4e:41:51:76:6e:98:46:bf:
03:0a:1c:10:04:cc:cb:e9:a1:8a:9c:c4:82:90:ea:
ed:10:d7:fd:86:89:d4:fd:6b:b2:88:e6:bd:7f:9f:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:BF:0C:87:CD:5F:A8:C7:9D:01:13:95:90:4B:77:EF:7A:9F:AC
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.97.0/24
103.209.79.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0f:dd:57:19:51:28:52:7d:ce:7e:aa:ff:1f:b5:5f:5b:86:
f8:6f:8f:d0:f6:a1:a9:f8:19:d7:01:89:58:83:45:33:ae:0b:
cf:9b:86:15:a7:c0:01:c2:0f:90:83:c5:79:74:a1:19:8c:38:
aa:cc:ab:be:e4:ea:e0:b9:01:79:f1:92:66:9c:dc:9c:87:06:
05:ac:b9:6e:1c:ea:0e:12:48:c5:0b:a7:60:81:02:21:ed:96:
87:fc:1f:78:e2:fe:e7:2f:5e:cc:09:2f:5e:e7:56:03:29:5d:
44:57:e7:d7:c9:22:29:ec:f4:8b:0b:9d:f8:4e:35:0e:a1:a5:
2f:5f:11:8b:1d:88:70:fb:39:4e:92:06:c2:1c:a0:43:40:ed:
8b:5f:12:ad:35:d2:0a:e3:9b:f4:07:50:b8:9a:7e:69:87:c5:
3f:e9:59:ce:20:25:fe:c2:f4:da:26:11:2b:c1:56:d2:30:c3:
f2:48:85:84:19:54:28:ce:0a:a1:7b:f1:aa:66:de:a0:5b:e1:
0f:09:37:76:cb:4f:12:b0:94:87:45:d1:0e:46:d9:65:bc:40:
63:2d:09:6a:10:1e:23:62:fe:17:8a:72:77:e8:c1:13:80:d9:
3e:64:f9:5e:f1:64:d3:de:61:3e:b6:54:ab:6b:8b:82:33:c6:
8a:ae:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:46:03 2025 by rpki-client