Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
File: 256273EE355011EEBCB7D945C4F9AE02.roa (raw, json)
Hash identifier: lqcM6RjOOpcHbcMSpsAk23mqpVkVNUDVGMmcyhyBg8o=
Subject key identifier: 98:42:A0:9D:42:68:12:7E:3C:72:1C:F5:E3:86:B7:AC:2E:C0:CF:0C
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 01B6
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
Signing time: Sun 01 Dec 2024 02:25:07 +0000
ROA not before: Sun 01 Dec 2024 02:25:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150371
IP address blocks: 103.19.48.0/24 maxlen: 24
103.19.49.0/24 maxlen: 24
2001:df3:3f40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67
Validity
Not Before: Dec 1 02:25:07 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674bc903-93f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:b9:61:3c:87:7e:c4:40:38:0c:66:96:64:
8e:2d:3f:32:06:65:57:c0:c0:c7:e4:ce:ae:f3:58:
e6:13:1d:a0:40:34:63:69:dd:89:50:84:94:f6:02:
fb:a8:9b:31:c3:4d:55:ef:b1:53:de:de:bf:c1:4d:
36:af:c8:20:e1:83:bc:89:11:6d:49:1a:11:cb:5a:
2a:c3:d4:90:0f:6f:5f:fe:c6:1a:ab:eb:55:70:02:
25:0a:69:d9:fd:1b:a0:97:8d:55:ac:6e:f6:90:ed:
73:7e:70:36:db:ee:a8:a3:c5:d7:93:cd:84:b5:92:
8d:8f:ba:b4:b9:6e:f9:bd:65:7e:f2:ef:fd:e2:fb:
bd:70:f9:de:cd:4c:e8:68:ec:40:6d:65:44:25:99:
b6:3c:e2:cd:bf:44:f6:4c:93:20:9f:a4:ce:de:91:
94:08:8a:ad:4d:eb:9d:c2:ab:89:00:d0:e3:d0:1a:
40:69:4c:7c:7f:31:52:06:88:2a:35:ca:55:61:60:
38:cd:69:d8:55:6b:c7:07:91:b9:be:ba:a1:d4:97:
01:40:d7:bb:68:7c:ba:0c:1a:81:aa:08:c2:33:cd:
5f:b3:f1:d1:35:05:51:f5:cc:88:3f:19:99:45:1a:
7c:e2:bc:4e:77:ae:e6:b7:ae:d5:10:1f:80:98:42:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:A0:9D:42:68:12:7E:3C:72:1C:F5:E3:86:B7:AC:2E:C0:CF:0C
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/256273EE355011EEBCB7D945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.48.0/23
IPv6:
2001:df3:3f40::/48
Signature Algorithm: sha256WithRSAEncryption
3e:27:42:8f:7f:bf:41:5b:cd:32:ea:aa:c4:10:df:4b:38:c0:
09:6c:07:8c:93:31:c6:7e:35:21:3f:1a:d6:c0:8b:a5:78:df:
85:90:8e:bc:e1:af:9d:06:0b:cd:9d:5f:5d:31:99:fa:60:36:
1b:30:7b:a7:a5:46:42:80:03:ec:4f:83:dd:a4:e4:4d:2b:b1:
29:da:93:ad:d2:77:8e:06:7b:25:a7:63:0a:99:d4:3f:ff:50:
58:41:8e:eb:36:cd:9d:cb:c3:fb:a0:4e:51:57:a7:60:13:a4:
52:c7:6f:a3:9c:34:a9:94:3b:bd:53:3e:03:1e:89:59:41:4a:
5b:63:a6:df:28:97:c8:ce:74:91:84:b6:06:33:80:85:32:68:
8f:af:87:47:ab:f2:fc:cb:3a:c3:03:14:6e:c4:54:4b:61:a9:
db:a6:0d:58:44:08:26:a0:9f:de:0b:1e:a8:10:c1:59:98:e1:
f5:ac:3d:0d:37:7f:c1:72:a3:53:10:b4:72:08:f2:d7:a2:bc:
52:46:49:b3:6f:68:32:11:b5:bc:af:06:b8:0c:55:61:11:47:
07:cc:4e:5a:43:0d:ad:04:0f:01:21:16:92:56:fa:90:6d:00:
f4:c2:ee:70:bc:88:fd:a6:12:89:80:0a:c7:38:6b:b8:ab:d8:
ab:54:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:55:26 2025 by rpki-client