Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa
File: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (raw, json)
Hash identifier: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=
Subject key identifier: 3B:D0:EB:2D:11:65:E0:17:AC:01:12:E5:0D:5D:A0:11:9D:62:51:50
Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial: 30
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa
Signing time: Wed 29 Jan 2025 10:08:28 +0000
ROA not before: Wed 29 Jan 2025 10:08:28 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137562
IP address blocks: 103.110.142.0/24 maxlen: 24
103.110.143.0/24 maxlen: 24
203.19.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E8DB
Validity
Not Before: Jan 29 10:08:28 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6799fe1c-c72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:9c:86:e3:d0:7b:a4:00:35:8d:22:41:13:
9a:48:1b:39:2e:ca:2e:04:15:6d:ec:43:ac:ad:94:
21:d6:d7:22:59:4e:c7:01:1a:7a:28:09:b9:82:af:
f4:7a:6c:4a:39:7d:17:bb:24:99:8c:d8:e2:00:7e:
3d:80:8b:49:4c:45:55:84:13:e9:be:d2:b9:cb:0c:
9c:3f:ae:dc:01:57:2e:70:b4:f6:3a:13:de:1d:f3:
47:da:b1:56:70:1c:d7:fa:02:b1:7d:99:f9:48:93:
ab:0a:fb:3f:79:a1:72:0c:64:e3:79:c0:f6:4b:9a:
5e:4e:82:ba:2f:85:2a:02:bd:14:0b:a8:dd:a4:68:
2a:a2:fe:ef:b1:11:73:64:7a:66:9c:6b:f4:38:f4:
81:2f:fe:02:51:6d:3c:a3:59:61:3e:77:99:4e:dd:
7d:02:72:2e:fd:e3:6d:77:87:ea:87:73:57:dc:13:
b8:f0:29:91:c5:b0:9d:bc:b0:5f:b1:88:e4:0c:11:
a4:26:40:20:33:55:ef:e1:9e:5e:df:7c:1b:4c:91:
a8:f8:b4:50:25:b3:d7:e5:1e:53:3c:69:bd:d2:d1:
d6:76:a7:28:f6:a1:8a:36:b5:b6:43:e6:6c:e5:b8:
3d:58:81:a0:e4:be:6a:49:81:d4:c9:e4:e9:3f:a9:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:EB:2D:11:65:E0:17:AC:01:12:E5:0D:5D:A0:11:9D:62:51:50
X509v3 Authority Key Identifier:
keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.142.0/23
203.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5b:59:05:89:7c:af:56:24:0b:7d:45:bf:8e:64:3f:23:7f:
c7:6e:38:27:bc:c4:6d:c8:b6:f7:a6:c4:bf:ad:e8:a5:0a:ed:
bf:15:83:40:05:12:bc:d8:a8:1d:4c:3e:ba:41:83:19:a7:ed:
0d:0b:68:e7:6d:1a:67:59:d1:8c:84:73:20:81:d9:ea:44:50:
8e:d6:a6:69:c2:1e:b9:fc:83:54:b9:45:12:fa:35:08:ed:c5:
09:21:a5:bc:de:4c:8e:0e:a7:1c:0a:80:db:9d:c3:01:a0:bc:
b5:23:bf:d1:ca:76:0b:bd:8e:f3:05:19:27:9b:9c:b6:1b:9e:
fe:72:36:6d:4a:99:ef:c4:5a:cf:2e:e8:85:45:df:b5:e3:18:
93:54:29:98:f2:96:af:b7:16:9d:95:64:30:76:e8:33:07:6a:
6f:c4:87:9e:f1:7e:b1:67:82:0f:b8:87:bf:8d:7e:7f:5d:be:
ce:d3:18:a0:51:2f:35:c2:a2:ab:00:b5:14:10:e1:aa:98:34:
ce:21:c6:2b:c7:35:be:ca:44:68:e9:c7:6d:4a:3d:d8:e6:02:
dd:46:8f:b4:9d:1d:54:3c:f2:8d:3f:b1:59:dc:72:1e:30:f8:
b5:e9:f2:82:1a:0e:8c:f3:b6:74:a9:95:2d:46:38:79:45:13:
a5:ad:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:19 2025 by rpki-client