Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
File: 62C86698F80A11EFA400AC2FC4F9AE02.roa (raw, json)
Hash identifier: UFgylA3DVYfccb8XdgcDubKXiQ2Mtm89Z4YEW6R99s0=
Subject key identifier: 1D:C3:DA:C3:37:E4:E9:A9:75:E8:B5:DB:E9:4D:52:08:A3:70:C6:E0
Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial: 02
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
Signing time: Mon 03 Mar 2025 08:34:56 +0000
ROA not before: Mon 03 Mar 2025 08:34:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137198
IP address blocks: 103.104.179.0/24 maxlen: 24
2001:df3:5700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A498
Validity
Not Before: Mar 3 08:34:56 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c569b0-fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:27:bf:8d:03:c8:d0:a7:63:99:8b:4d:dc:
a0:ec:e9:87:64:55:ec:e1:cb:61:2f:ae:98:01:7b:
8c:fd:7a:35:a2:01:89:a7:81:df:58:f3:95:f9:aa:
86:77:0c:16:01:73:ed:f9:87:b5:69:8e:e2:40:f7:
3c:af:f8:3e:83:8c:97:ca:f2:00:9a:85:33:6f:b4:
11:cf:c3:56:95:95:26:42:0d:be:23:f5:40:e3:6f:
2d:cb:79:d1:dc:dd:24:7d:e6:a7:1e:4c:9a:f6:22:
b2:ba:b1:3c:ed:6d:f6:79:84:b8:4a:5e:b5:09:38:
79:06:f3:7c:59:c9:46:85:13:98:b2:cd:a9:9c:2b:
81:a5:20:7b:a6:b5:f9:10:0e:2e:be:c3:ef:e0:fe:
d7:1e:25:f3:82:a0:07:42:45:94:4a:19:32:1e:0b:
f8:e7:f9:ad:45:40:10:bb:69:97:6b:12:cb:1d:82:
99:47:69:13:e4:74:59:87:cd:74:5e:36:0f:1d:b4:
40:f4:cd:17:5f:6a:35:f0:77:21:54:19:76:6c:ec:
a9:89:20:25:d0:c9:91:33:81:7b:5c:a0:b0:0e:8a:
09:bc:30:fb:92:af:16:b3:94:a0:59:83:87:f1:16:
7d:6f:4a:e7:42:61:d1:85:3c:58:b1:80:0d:30:b9:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:DA:C3:37:E4:E9:A9:75:E8:B5:DB:E9:4D:52:08:A3:70:C6:E0
X509v3 Authority Key Identifier:
keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.179.0/24
IPv6:
2001:df3:5700::/48
Signature Algorithm: sha256WithRSAEncryption
05:ed:d4:ae:33:9c:65:8c:cf:73:47:9c:b0:34:fa:e9:4d:9e:
10:a3:05:2e:bc:8d:65:6e:8d:05:c3:c1:d0:85:e4:39:a4:93:
da:db:2b:56:54:02:f4:62:db:1d:99:d4:17:a2:59:28:1c:4b:
c9:8f:16:f2:c5:df:66:84:13:ea:6c:63:54:6c:96:f7:94:da:
b0:7f:33:e4:ec:40:3b:33:a1:43:4b:6f:87:ce:91:7e:ec:01:
73:63:dc:1e:63:d9:e4:e0:ce:cd:ae:02:fb:08:0d:08:a2:89:
bd:88:c4:1c:88:5a:e8:39:1d:66:d0:3d:76:37:0b:be:4e:c2:
70:13:81:02:18:6d:8d:93:17:0e:95:6b:ae:48:82:64:b3:01:
ca:17:60:64:bb:81:ad:a2:05:ee:c4:4c:4e:7d:89:ff:e0:d0:
d2:06:d3:33:ed:63:4e:00:f5:27:bc:86:2e:fc:e7:c3:4b:bc:
3e:17:ca:ad:76:f1:b9:59:03:e1:e6:c4:62:2e:a4:48:36:d0:
bc:f6:68:77:4c:8d:e9:d9:d3:02:f3:fd:25:28:60:23:b1:29:
21:40:08:52:11:e5:48:93:ca:97:19:d1:72:2b:d8:28:de:c1:
84:b7:41:34:5f:8d:a3:08:d9:28:a9:97:21:9f:80:b9:a1:13:
83:de:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:18 2025 by rpki-client