Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
File: 71FDE240807E11EF9EE1801DC4F9AE02.roa (raw, json)
Hash identifier: q+b+4tTt/sEDZ8Vyjb3CjEmYUVtMW/WyT/A34CwEyBk=
Subject key identifier: 1C:CD:08:61:58:E7:F9:6B:B3:79:EC:4F:73:1F:49:E4:39:26:C9:67
Certificate issuer: /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Certificate serial: 0725
Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
Signing time: Wed 02 Oct 2024 05:23:24 +0000
ROA not before: Wed 02 Oct 2024 05:23:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 38803
IP address blocks: 103.145.116.0/23 maxlen: 23
103.145.116.0/24 maxlen: 24
103.145.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192210
Validity
Not Before: Oct 2 05:23:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66fcd8cc-d531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:a9:7a:87:d4:a5:93:23:2d:66:bc:5c:ea:
81:1d:1a:e0:66:0e:eb:1b:39:cb:4c:fb:52:ad:98:
85:2e:0b:a7:d9:61:0e:dd:57:f9:9a:22:37:89:4f:
5a:b3:a3:24:ab:d5:f0:54:1c:f4:67:ac:93:c0:c6:
01:11:cd:82:53:68:84:e5:28:99:8b:88:ae:cc:6c:
cb:60:ed:2a:33:f7:e8:14:45:a3:59:c4:32:00:ee:
47:13:85:44:96:fc:72:fe:46:86:41:1f:a2:f2:63:
a7:b2:2a:54:a1:59:0d:44:cc:fd:c6:96:35:fd:25:
3b:31:27:3f:f4:bb:2c:fd:ad:91:74:8b:90:15:03:
5e:fe:4b:83:81:fc:02:ca:64:db:e1:97:b2:1a:d9:
bf:b7:1b:5a:97:b0:8c:37:72:b6:06:97:2c:59:c1:
70:e2:79:09:02:c0:c1:1e:af:02:19:a9:3a:37:b1:
b6:a5:f9:52:52:e5:8b:d3:0a:db:69:d2:d1:ef:ac:
8e:c1:64:40:4e:24:c8:94:4c:3c:52:b4:91:2d:1a:
a9:2b:95:90:bf:84:85:34:7a:62:5d:c7:f4:2b:d4:
10:d7:51:1c:37:53:a5:a3:2d:8a:af:49:ba:73:ab:
98:15:2e:a2:5f:12:7b:b4:4e:a3:2e:dc:6d:f2:54:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:08:61:58:E7:F9:6B:B3:79:EC:4F:73:1F:49:E4:39:26:C9:67
X509v3 Authority Key Identifier:
keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/71FDE240807E11EF9EE1801DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.116.0/23
Signature Algorithm: sha256WithRSAEncryption
50:6d:1e:1c:f7:ce:17:79:a3:59:0e:d7:a8:4f:59:7d:cb:92:
88:e2:24:14:9e:e5:f6:30:98:12:b9:d7:c2:06:79:f1:52:d1:
11:f7:3a:14:c7:57:d2:f5:49:89:a2:90:09:77:35:38:cf:4f:
a8:84:15:77:c2:ae:70:3c:60:fd:c0:2f:d0:f0:8b:15:64:2e:
2d:55:aa:e8:35:2a:fd:5e:62:85:e9:5c:97:e6:a0:2e:2e:81:
ee:13:ff:c0:a2:f1:b5:63:94:8e:1b:7a:c0:38:80:3a:97:62:
f3:6f:b6:20:84:e8:f2:71:e7:79:72:0f:43:de:b6:65:21:6f:
58:e5:a0:4b:ec:48:2f:80:da:3b:b1:2d:49:4d:e1:86:57:fa:
a2:57:eb:da:b7:41:fb:c6:a6:9a:08:99:2a:4e:b8:36:22:12:
81:7e:5a:5b:1a:46:79:35:a3:c1:ec:4b:f0:4a:be:fd:d2:2e:
5c:1c:62:ca:af:75:34:fa:3e:ce:b2:ce:93:ed:53:3a:a4:d6:
89:58:b1:09:73:85:06:1d:6e:bd:e1:b3:ac:f9:81:4e:47:aa:
73:31:eb:a7:08:5f:e8:da:99:54:b5:cc:5c:19:d8:79:bc:34:
ff:13:4b:4c:5e:ed:f2:8a:19:53:5e:2f:70:fe:f6:21:91:c1:
f0:bc:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:29:34 2025 by rpki-client