Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
File: 9FE7159201D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier: VVdMpQJfWJzeEGllDWHOaKV26ooqf2lxHQS0gQIblUk=
Subject key identifier: AF:26:96:BA:8F:38:C8:03:E9:BF:6B:33:B1:38:51:8B:AE:AD:A8:9F
Certificate issuer: /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
Certificate serial: 011C
Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
Signing time: Sat 13 May 2023 06:25:15 +0000
ROA not before: Sat 13 May 2023 06:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59338
IP address blocks: 103.227.236.0/24 maxlen: 24
103.227.237.0/24 maxlen: 24
103.227.238.0/24 maxlen: 24
103.227.239.0/24 maxlen: 24
2001:df3:f800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D8BA, serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
Validity
Not Before: May 13 06:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645f2d4a-7572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:3f:fe:a6:c0:22:bc:23:a0:e3:46:66:fa:
6b:f4:49:6c:04:a8:c3:98:68:6b:0a:24:28:3d:ac:
30:b9:62:0d:10:c8:6f:c7:ff:e6:42:68:df:62:12:
58:ea:9a:bb:44:e3:f4:77:ab:81:2a:e5:a7:18:fe:
5d:6a:f2:57:88:85:2e:81:bf:62:ff:f2:9f:58:f0:
fe:41:e5:1f:61:42:c0:05:aa:f2:ad:0e:1f:c3:6f:
87:fa:89:a7:87:1d:51:70:21:68:aa:85:a7:e9:cd:
27:4f:0b:7e:48:26:58:3f:e9:89:a0:48:dd:f5:a1:
e5:11:7e:0c:30:4a:4f:a9:ac:cd:95:de:a2:eb:20:
28:58:ca:57:05:94:83:9d:a1:f9:6d:d9:43:73:40:
6e:b9:07:6f:8d:af:f7:70:d6:13:e7:fc:21:43:20:
c3:ca:bd:76:bc:4c:33:18:60:ce:0e:7d:de:cd:06:
f2:90:73:94:98:4e:6e:0e:7f:97:6c:23:99:17:b5:
45:79:1d:9e:02:cd:68:cc:f2:d9:62:4e:6e:15:61:
72:bf:1a:b2:95:7c:04:18:c8:b6:fc:b3:b1:0b:d4:
47:90:76:80:b4:0c:10:f7:f5:d2:65:19:32:5a:3b:
e0:00:71:ce:ad:9f:30:44:ea:4a:0c:62:46:2e:b5:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:96:BA:8F:38:C8:03:E9:BF:6B:33:B1:38:51:8B:AE:AD:A8:9F
X509v3 Authority Key Identifier:
keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.236.0/22
IPv6:
2001:df3:f800::/48
Signature Algorithm: sha256WithRSAEncryption
27:71:4d:d9:4b:43:a6:5e:3e:a6:91:b8:23:3a:35:86:0a:62:
8d:7d:d1:ed:f2:8b:72:d3:4d:0c:11:69:8c:d2:a2:02:e4:c4:
f8:6c:40:b7:6d:ec:ac:fa:d2:da:62:9f:e0:d4:dd:4b:58:f3:
de:02:d9:7c:19:46:ed:3d:02:e4:74:c7:78:14:60:bf:13:f4:
60:ef:6f:85:20:06:d3:89:a9:a8:3d:be:5d:90:ca:67:ae:63:
35:b1:ed:c6:bb:89:aa:74:97:d9:c9:81:4f:ec:f5:a0:cf:fe:
5a:68:75:e5:e7:9d:02:c1:06:f1:f8:ee:2f:a2:1e:4a:53:00:
0e:97:7b:46:ad:12:dd:7a:80:d3:fe:c6:b3:d7:ec:70:69:8d:
b9:40:50:52:2f:be:99:20:c6:10:fc:f6:ab:d1:64:ac:67:d5:
72:d9:18:a3:7b:f0:37:a7:6e:de:11:26:83:24:de:4e:e1:53:
9f:94:66:27:99:fb:5b:3e:5e:7a:d2:3d:a2:68:85:a7:dd:58:
80:e5:db:81:0f:14:9e:81:17:a9:23:de:9b:ab:46:1d:76:cb:
95:10:28:44:79:ea:d9:c0:c8:f4:c7:54:a4:e9:c1:fb:d3:b3:
92:9f:9a:2d:d7:7f:5b:eb:18:b0:37:34:23:36:7c:08:a9:b9:
d4:8b:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:32:53 2025 by rpki-client