Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
File: 2F24736869C111EF92B54060C4F9AE02.roa (raw, json)
Hash identifier: 3Y7RO9a921W0m0+KGz0aqJiJml6RthEQD034mrQPM14=
Subject key identifier: B3:55:8A:71:36:D0:EB:A3:E3:C8:B2:E4:BA:D0:4C:19:0B:30:FD:2C
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 038E
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:15:14 +0000
ROA not before: Thu 05 Dec 2024 01:15:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 209988
IP address blocks: 103.49.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Dec 5 01:15:14 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750fea1-550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:69:1d:f6:f7:10:03:fb:7b:9c:6b:43:32:
9c:da:7b:a5:b1:33:91:eb:a3:86:9d:c5:d1:ac:ac:
2a:60:f1:e7:a7:c7:cb:4c:5a:70:2d:28:c7:00:cc:
18:82:9a:a6:67:ec:39:f9:8c:cf:15:e7:e0:8a:73:
ba:5b:47:fd:87:9c:4e:14:d5:f0:1a:84:35:24:c0:
ef:e8:e7:dd:51:25:b8:d7:78:ab:9e:99:dd:60:16:
fa:0a:4b:d4:e4:c0:ed:45:d6:0f:69:a0:ca:ab:96:
c0:ea:a3:07:c9:b1:3d:88:a6:e6:1c:dc:e6:7a:c7:
a1:d4:dd:24:09:f5:16:88:71:e9:f4:f5:2b:bd:3d:
bb:17:33:fd:39:d9:63:d5:69:e8:c9:3a:59:7f:d8:
de:45:83:5f:fd:0c:9c:77:b6:d1:5d:05:f2:ef:5f:
a3:b1:87:2a:c5:e6:a4:d0:35:ed:40:7e:e6:81:0b:
6c:57:de:30:51:11:52:d9:f9:3e:f5:db:78:cb:c2:
68:5b:e4:21:8f:67:cd:18:71:ee:37:9e:59:a7:22:
43:5c:8c:1b:13:71:3c:0e:13:6c:a9:1f:e6:28:bc:
f2:a3:4e:53:69:64:7f:76:90:fa:ce:fd:3c:72:b2:
0d:39:b6:8f:bc:0f:5b:05:19:f7:19:d9:1f:38:de:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:55:8A:71:36:D0:EB:A3:E3:C8:B2:E4:BA:D0:4C:19:0B:30:FD:2C
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/2F24736869C111EF92B54060C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:03:ca:aa:57:96:53:27:91:b0:29:01:5c:e9:e0:19:8f:b5:
f0:4f:e2:b3:da:24:00:fe:c6:ec:da:d1:3c:de:5e:7a:e3:f0:
41:00:7a:9b:09:c3:15:70:df:b9:45:dc:13:94:fb:31:53:fc:
7d:0a:88:71:78:b7:31:8c:95:36:d2:81:a3:f6:e9:1d:71:88:
db:03:d8:61:25:6a:a7:35:92:4b:97:74:f0:ac:11:94:ff:ec:
32:c7:f2:7c:9e:84:ff:16:7b:84:87:1e:ea:0b:e9:16:6f:c7:
63:f7:4d:bb:1e:6e:76:b7:b5:9f:33:20:09:1d:21:ee:08:9c:
b5:68:0e:13:b3:a1:1c:7e:c5:e1:f4:e7:2c:2e:31:97:a9:a5:
10:77:04:ee:da:ef:56:1c:72:04:c0:d5:7d:31:7d:46:b3:61:
0f:be:4f:88:52:95:60:c7:25:24:4a:a5:df:a6:df:8c:24:82:
45:0d:80:5e:dc:c2:f2:f0:ac:6a:2d:72:cf:82:92:fb:8e:bd:
2a:4c:f6:9c:e1:07:da:8b:b9:c3:52:63:aa:51:67:66:04:8d:
09:c9:3d:45:3e:b9:8f:2a:97:78:cd:13:0b:d6:0f:48:8a:7d:
48:fc:ac:ae:de:4d:82:14:c8:90:3f:28:a2:bc:1f:8b:ee:e3:
91:8b:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:30:09 2025 by rpki-client