Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
File: A2326CD09BC711EDB1BAE42AC4F9AE02.roa (raw, json)
Hash identifier: f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=
Subject key identifier: 30:37:99:DE:05:C9:52:3D:26:65:8D:4A:D7:46:78:D4:EE:1A:04:AB
Certificate issuer: /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial: CF
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
Signing time: Mon 29 Jan 2024 05:17:36 +0000
ROA not before: Mon 29 Jan 2024 05:17:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 6939
IP address blocks: 103.73.218.0/24 maxlen: 24
103.73.219.0/24 maxlen: 24
2400:d8e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A6BA, serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Validity
Not Before: Jan 29 05:17:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65b734f0-dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:e6:2d:a9:48:7a:c4:4f:bd:5d:68:aa:2e:
23:57:67:b3:6f:22:32:0e:26:70:ab:e5:ee:44:d6:
f3:76:03:c4:17:05:b7:71:f3:92:b5:5b:d5:a8:ee:
b0:dc:8a:54:df:2e:73:b9:7e:e3:d6:d9:87:a3:b6:
f2:f0:f9:20:16:de:9b:70:3a:bd:e1:8b:ee:0f:89:
6e:8f:2e:1e:c2:c3:2b:58:c4:26:3d:96:0b:55:23:
56:f3:7b:47:1a:fb:f6:2c:17:12:98:24:94:61:e1:
72:17:fc:82:02:72:7d:f4:3a:8d:4d:24:a5:ea:88:
6b:78:2f:ea:69:f8:e5:90:13:04:0d:9e:83:ec:7e:
03:99:22:81:76:0f:06:05:cd:e8:6d:72:a7:b7:fb:
20:14:11:01:fe:f7:08:46:79:34:03:cb:9a:31:bf:
92:38:43:38:51:a0:64:84:96:93:47:3f:bc:56:c5:
ef:a3:de:49:35:d7:4b:7a:bd:19:07:cc:ab:18:36:
b5:2a:9a:d1:8c:53:49:71:47:28:32:73:8f:67:7b:
13:52:8c:56:fd:e8:ce:31:6e:cb:c4:95:98:87:ab:
4b:73:2a:c4:99:7e:8a:fb:7a:60:8b:03:cf:84:34:
af:c8:08:08:3a:9e:bd:17:84:2f:09:a2:a0:68:23:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:37:99:DE:05:C9:52:3D:26:65:8D:4A:D7:46:78:D4:EE:1A:04:AB
X509v3 Authority Key Identifier:
keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/A2326CD09BC711EDB1BAE42AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.218.0/23
IPv6:
2400:d8e0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:82:af:a8:1c:80:47:fb:6b:b7:39:46:03:d0:6e:dc:ab:60:
99:6f:36:25:78:f1:52:b2:fa:47:36:23:7d:aa:e8:e4:46:2e:
a3:9b:71:31:00:f0:fa:ab:7f:f0:1d:06:04:60:11:cd:46:e8:
78:0c:2b:70:04:78:64:a7:5e:ca:59:94:66:6a:db:e0:40:1a:
45:72:a2:74:8f:a3:75:c2:1d:d6:a2:8d:a9:84:17:40:59:5d:
45:96:61:d0:ea:83:4e:20:9d:86:d5:1b:e4:3a:1e:a9:1b:f9:
98:b6:55:7f:f2:0c:6e:17:e8:b4:95:ce:ea:7d:79:1f:3a:7b:
0b:ae:d9:af:25:6b:28:70:22:17:9d:91:79:d5:10:6d:83:6a:
e9:e1:3f:8b:91:56:ef:88:98:10:6e:a0:d4:0e:ee:ed:9d:5a:
d6:f8:e9:24:59:fc:bf:f8:b9:33:23:a5:ef:30:30:13:d9:99:
2f:5f:e6:45:3c:3b:3b:dd:fa:9b:07:90:29:d0:b9:b4:b2:b7:
dd:06:8a:b5:ad:34:54:cb:18:39:65:82:a0:23:0c:97:a8:3c:
d3:e1:d8:bc:c7:04:b9:20:38:23:09:b3:b1:61:ed:18:06:48:
d2:2f:24:e5:40:9f:e0:6b:64:49:fd:90:68:5e:90:a6:56:77:
7e:02:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:34:33 2025 by rpki-client