Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
File: E562A356702F11EF9806F81FC4F9AE02.roa (raw, json)
Hash identifier: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=
Subject key identifier: D1:B3:E2:02:F2:87:CC:13:C4:C1:17:66:8A:AF:3C:E5:58:53:83:8E
Certificate issuer: /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial: 060C
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
Signing time: Thu 16 Jan 2025 22:43:06 +0000
ROA not before: Thu 16 Jan 2025 22:43:06 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141159
IP address blocks: 103.146.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00E
Validity
Not Before: Jan 16 22:43:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67898b7a-02e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:ee:2b:f7:9f:e3:a7:b8:6d:85:36:a3:03:
f3:87:45:2f:44:66:ec:c7:06:a3:f0:ca:27:0a:60:
1b:70:ba:7c:40:52:da:bd:58:82:48:5d:af:58:85:
e3:4b:94:3c:88:a6:48:e8:53:30:f7:77:08:13:63:
d5:da:eb:88:08:eb:e8:48:ab:f9:80:e5:c5:cf:bd:
8f:b5:23:41:ee:9e:2d:20:67:47:72:0b:ce:6c:fe:
85:86:34:64:d7:57:ee:5e:1c:1e:e6:48:27:02:5a:
74:15:68:e8:3a:0f:b5:27:33:32:9e:53:22:c3:ff:
45:b5:e5:69:00:b5:67:82:72:27:a0:2e:c8:b6:6e:
30:32:d0:60:3d:73:8e:45:89:2b:76:e0:45:d4:6e:
7e:ce:97:ef:42:96:7d:94:c1:f3:e8:1f:da:f5:90:
63:59:03:ca:77:dd:df:1d:c6:80:51:f0:52:b6:76:
84:fb:73:6d:bd:a4:a6:13:d6:96:a1:0d:39:b3:5b:
82:6e:af:cf:c9:e1:6f:7e:59:42:df:ae:c7:18:93:
2a:0c:ac:d0:0c:df:6a:f6:3c:d8:98:4e:26:cf:cf:
c5:3f:9e:a9:0a:55:f2:e4:f4:c5:14:32:e1:15:6c:
fd:aa:bd:19:bd:a4:f0:62:ea:53:81:21:52:a7:3b:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:E2:02:F2:87:CC:13:C4:C1:17:66:8A:AF:3C:E5:58:53:83:8E
X509v3 Authority Key Identifier:
keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.124.0/23
Signature Algorithm: sha256WithRSAEncryption
48:fd:7c:57:c5:de:92:ba:e8:01:7b:7e:c8:50:d7:8a:df:9a:
81:2f:56:31:cb:a8:8a:65:25:eb:23:87:fb:66:6d:20:39:85:
97:32:6a:73:b5:f0:44:4e:77:45:87:dc:ce:49:df:01:05:96:
59:02:69:42:ad:dd:6d:f0:8e:74:1a:58:33:c6:2c:23:95:f4:
69:74:ee:66:eb:03:55:89:db:72:87:98:3f:b3:82:24:b8:ef:
a4:c5:b8:63:bd:2c:28:1b:2a:ab:f2:a2:ef:6e:75:71:9a:6d:
50:6e:0f:4b:6a:df:95:48:51:88:14:58:58:2f:4c:29:48:ce:
af:3f:93:64:ba:53:6e:ff:09:d2:8e:cd:4b:61:4a:08:35:91:
2c:bf:aa:f9:29:74:8f:c6:e0:71:f1:c6:62:02:05:0b:bf:ce:
17:b0:d7:ee:8d:92:2b:e1:57:97:a3:3e:4b:96:0f:d9:b3:88:
e3:e1:e8:0c:69:ca:05:1e:a4:06:c6:33:d5:65:48:13:b8:fc:
5f:35:22:a5:c5:40:12:93:27:43:14:56:15:50:55:18:54:59:
7d:3f:7f:95:19:85:58:37:f3:f9:77:ec:64:c2:68:fb:ea:21:
85:c5:2e:be:3b:c4:de:cf:41:37:49:1c:fb:64:46:59:6b:de:
e3:05:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:11 2025 by rpki-client