Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
File: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier: Ox9R9PiD8T0HlZTCVj50DkgG3vmsXlU+75pqLoh4Z1Y=
Subject key identifier: 8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 0EBF
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
Signing time: Tue 26 Mar 2024 18:36:42 +0000
ROA not before: Tue 26 Mar 2024 18:36:42 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 18013
IP address blocks: 103.133.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3775 (0xebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Mar 26 18:36:42 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=660315ba-9f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:1d:7e:bb:03:7c:f5:46:e8:b5:08:6e:ac:
3e:e4:0a:b8:63:86:cc:d6:ce:b3:ed:89:7f:dd:d4:
f1:ab:6b:0d:b6:45:3c:f3:13:54:d3:c8:30:fe:af:
7c:a0:01:05:39:38:5e:10:b8:ff:3c:18:8a:15:23:
45:fe:bf:52:67:8f:49:02:39:8b:4f:54:28:1d:67:
d0:0a:90:c7:97:0a:4c:5c:95:15:ea:8e:4b:ea:d0:
79:bb:44:a8:e3:16:bb:f0:ec:b8:ed:b1:2d:11:a3:
60:76:e9:4b:fc:11:0d:47:3b:17:17:66:f4:d8:a5:
50:6b:73:db:94:1b:9d:71:5e:ac:cd:29:20:57:a1:
70:3b:43:83:cc:40:ce:fe:7f:c2:f5:06:22:05:c1:
7d:f3:01:b3:c3:46:b5:c9:ba:b2:08:fe:f0:f8:bc:
9c:04:61:50:9f:9b:21:e3:3a:26:46:c9:3b:e1:7b:
ab:69:08:5b:89:dc:33:65:ed:07:9a:8c:3b:fa:f5:
5b:7d:27:e3:03:0c:8e:78:4b:37:27:9f:d6:8d:43:
b3:64:42:10:01:98:08:fa:d5:ed:b8:24:d4:d0:5c:
35:01:40:96:ce:7d:6e:ec:91:0e:2e:55:7e:da:82:
e6:1c:a6:5f:f8:1d:d4:1f:ff:a4:83:14:33:4b:1e:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:3D:CB:BA:15:A8:37:0A:FD:A5:1D:8A:ED:A8:BF:41:57:81:D3
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B3682FEC21D711EB9CFAC46EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:f9:bc:e5:c2:4b:85:ab:1b:76:57:8a:f4:99:27:1e:4b:a1:
f2:61:e5:f1:89:5d:f4:d8:65:4c:bd:7f:00:15:6c:cd:e4:e8:
06:b7:a5:20:e4:2e:4c:fd:d6:ca:c4:cd:a7:14:b8:de:c5:4b:
61:81:e8:f5:c9:83:3b:b7:b4:27:a7:19:48:ee:8f:e4:ad:a7:
b8:5a:cd:8c:77:6b:fd:d6:0b:c6:bd:b5:38:c2:98:ca:1e:c9:
e6:3a:46:19:c3:e3:28:c0:30:10:af:9f:38:c1:8a:fd:69:7f:
bb:1e:78:97:11:cf:63:b8:40:10:d7:cd:55:77:9b:45:ea:25:
3e:50:35:25:4d:2e:5f:2a:ec:28:86:9a:c6:ea:a1:0b:25:6b:
04:74:98:67:05:5f:0a:b6:29:7a:ff:ac:b9:ae:2a:fa:ec:28:
91:64:67:00:c6:b2:a6:e6:68:07:40:06:1e:18:0f:c9:25:69:
7b:7a:44:59:f6:1e:20:05:8f:68:f5:1a:cf:7e:19:10:9b:23:
f4:2b:26:69:5e:2b:c5:a7:11:65:85:5a:8e:2b:58:1a:bc:a3:
f0:b2:00:c9:8c:6a:bb:44:f4:cf:09:c9:7b:e6:79:82:52:c9:
0f:93:dd:64:c9:56:5b:49:28:d2:75:61:b2:2b:26:43:69:32:
b9:67:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:29 2025 by rpki-client