Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa
File: 2884888A717011E99BA2FB3DC4F9AE02.roa (raw, json)
Hash identifier: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=
Subject key identifier: A2:82:13:91:40:37:52:8D:EE:2C:BB:0F:5E:DB:51:7D:14:C7:F9:CA
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 1027
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa
Signing time: Sat 04 Jan 2025 17:25:38 +0000
ROA not before: Sat 04 Jan 2025 17:25:38 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.116.193.0/24 maxlen: 24
103.116.194.0/24 maxlen: 24
2001:df3:1300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4135 (0x1027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9
Validity
Not Before: Jan 4 17:25:38 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67796f12-6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:e6:8c:ac:88:ee:ab:96:70:08:1d:1f:70:
62:a8:ba:90:55:c2:9a:23:a2:61:79:93:84:5d:51:
cd:49:cf:96:f5:8c:8c:2d:bc:56:85:c8:aa:ae:fa:
30:3d:8d:9d:83:bf:fe:69:99:cd:0f:39:30:ec:da:
dd:22:10:c6:e8:b2:b2:a5:83:1c:7a:81:0c:6a:eb:
f6:44:bf:24:7b:cb:d2:9f:1a:fd:f6:7f:13:7a:0c:
a9:6e:80:6d:46:d6:4f:47:bd:31:2d:68:dc:a3:6b:
76:7e:bf:71:2b:7a:f6:42:8c:d3:4f:27:4c:a4:fe:
94:f5:21:13:fb:86:b8:e3:12:eb:36:3c:f4:42:41:
38:4f:e4:70:d2:63:0e:2c:4c:8a:5b:0e:a4:35:fb:
76:46:f5:b8:ec:9b:63:ce:aa:4e:fd:a4:79:17:52:
0e:bc:27:e1:3b:ea:84:db:62:c8:69:1b:2b:f8:2b:
42:60:45:79:97:35:b7:37:4f:6d:4f:09:a4:87:9d:
3d:ab:bb:93:22:37:69:4b:b5:3e:08:82:aa:28:02:
03:99:9f:2e:76:57:ea:64:3f:f4:e0:03:0e:85:2b:
90:62:17:67:41:cb:84:f5:c4:d3:65:bb:4f:5d:f6:
1c:ef:e3:fb:1c:4a:f9:52:02:35:43:29:a6:f4:2f:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:13:91:40:37:52:8D:EE:2C:BB:0F:5E:DB:51:7D:14:C7:F9:CA
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.193.0-103.116.194.255
IPv6:
2001:df3:1300::/48
Signature Algorithm: sha256WithRSAEncryption
74:94:ce:6d:73:b5:74:b5:5a:da:32:82:3e:4f:26:d2:26:ec:
a7:c5:e3:5e:b4:b1:91:10:e6:6a:25:55:71:dc:0a:c4:ac:58:
1b:96:f1:25:83:e2:1b:ee:20:8d:1b:ae:ad:e6:e0:c9:37:34:
33:48:9c:c7:cc:83:6f:fb:25:58:6d:ec:1c:69:a6:58:37:ec:
e7:73:ad:96:85:90:a5:ec:b0:a2:71:c0:05:43:6e:c0:7d:b9:
54:79:50:79:d5:fe:08:1b:8a:77:28:b2:a4:8a:7b:5c:82:8d:
4d:c0:7a:3d:2d:c9:81:f1:ba:f0:ed:3c:84:56:8b:53:0e:98:
8c:67:f0:39:d5:f5:47:dc:d5:d1:e0:3e:53:72:88:e7:7f:1b:
fc:72:4b:b2:e3:51:17:42:d0:b6:4d:d2:02:c2:bf:fb:f8:47:
6e:2c:74:90:ab:3b:70:56:83:0a:41:70:09:ed:47:0c:3e:dd:
40:7a:0c:9d:be:bd:cf:ba:0a:fe:74:a6:88:68:a2:dd:bd:ac:
e2:ef:ca:ff:36:d8:c9:71:f3:3b:8c:9d:cd:0e:1e:3c:87:cf:
8d:6e:1f:12:38:01:21:9b:a1:96:d0:52:8c:e3:b1:cb:e4:2e:
ee:71:da:55:13:5b:46:7a:5d:c6:7a:f0:41:46:63:43:b2:3e:
29:24:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:00:28 2025 by rpki-client