Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa
File: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (raw, json)
Hash identifier: 2M0t54ZWVSyH7zW4xiy91/NSsBSKVlPooU2mIewxcFg=
Subject key identifier: F4:F7:A1:98:D4:B0:58:5A:6B:4F:9B:6F:56:4E:9E:B5:F3:CE:A1:66
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0245
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa
Signing time: Thu 16 Jan 2025 07:53:56 +0000
ROA not before: Thu 16 Jan 2025 07:53:56 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140224
IP address blocks: 103.189.255.0/24 maxlen: 24
2407:2440:1a::/48 maxlen: 48
2407:2440:29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8
Validity
Not Before: Jan 16 07:53:56 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6788bb14-b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:47:92:fe:5d:73:90:cf:42:fd:47:89:41:
d1:a1:9a:07:8f:4e:67:ca:60:99:de:36:7b:de:5c:
42:39:43:d0:ab:b9:b3:0e:1d:85:27:60:45:36:2c:
12:a7:f5:d2:48:94:a1:6e:38:b4:77:59:7b:3c:99:
42:d8:a7:85:43:20:b0:0b:f8:82:e5:9e:a7:15:da:
81:f9:86:fb:1e:e7:28:1b:eb:ef:4a:07:7b:01:96:
8f:78:34:9d:35:74:7b:3a:64:a2:ce:0e:4b:f5:09:
02:d0:fb:49:3c:e2:d2:aa:b7:a9:37:e0:33:7b:3a:
e3:42:d8:29:4e:22:35:d1:22:cd:00:8c:1b:68:40:
d6:44:16:16:c3:85:2d:08:6e:64:35:7c:6f:e0:9a:
a3:19:bb:1f:6e:b5:d2:84:04:b8:38:2d:00:bc:29:
a0:d0:89:8c:6d:18:23:d6:1c:0d:82:0b:8f:ca:54:
5c:29:51:67:eb:de:c7:63:d5:b5:15:75:8e:d0:d9:
95:db:ce:50:52:22:5c:7d:02:64:7c:d7:5b:ad:0b:
b2:b9:51:aa:e9:7b:b0:96:23:ca:0f:51:ca:52:f0:
64:0c:07:cf:e7:24:88:30:84:08:70:d0:50:6d:39:
d9:55:9c:c5:5c:7a:21:e0:75:4b:d0:a4:f3:62:42:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:A1:98:D4:B0:58:5A:6B:4F:9B:6F:56:4E:9E:B5:F3:CE:A1:66
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.255.0/24
IPv6:
2407:2440:1a::/48
2407:2440:29::/48
Signature Algorithm: sha256WithRSAEncryption
7d:ef:f8:0e:86:de:71:68:0e:95:17:52:0f:b2:d6:cb:df:b7:
75:2c:56:8d:d3:19:a9:3b:20:f3:0b:13:3d:a9:6b:85:3d:7d:
f0:2e:1c:15:36:8d:ed:6f:41:20:86:e0:22:5b:6d:cd:29:3f:
dc:68:32:95:e3:a2:d1:6b:b3:fc:44:19:8e:84:4d:2b:fc:54:
53:8c:d2:ce:5e:09:8b:91:98:da:1e:24:4a:07:32:d5:c1:34:
0e:fd:04:73:ba:74:4a:73:1b:13:49:1c:58:84:dd:07:a4:1b:
e5:66:ec:eb:b8:c3:d8:b6:44:95:7e:9e:db:50:f8:7a:a9:1e:
d8:5e:f8:bb:0e:48:cd:3e:23:b6:84:ff:44:e6:67:b9:b9:67:
ce:46:be:c6:1a:72:18:5c:9c:b7:05:f1:e1:cc:2b:69:8c:65:
64:ef:7e:4b:61:02:ad:32:bf:8b:58:72:9e:82:57:81:3f:bd:
a3:00:28:0f:92:55:1f:f4:2a:90:72:f5:b2:b7:43:98:83:25:
09:95:51:f5:cd:6f:0b:78:7a:79:06:77:72:df:55:27:79:66:
6d:30:ac:e6:6c:cf:3b:cc:b6:66:25:b9:59:a0:8d:57:b7:7f:
49:28:7f:65:68:fe:0f:ad:b4:cd:ff:14:a9:ac:bb:50:18:f5:
28:eb:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:12 2025 by rpki-client