Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
File: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json)
Hash identifier: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=
Subject key identifier: 5D:8C:49:AD:1C:4E:F4:2F:33:8F:CF:5C:16:F7:47:00:12:C2:A2:83
Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial: 03CF
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
Signing time: Mon 21 Oct 2024 00:43:43 +0000
ROA not before: Mon 21 Oct 2024 00:43:43 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 10021
IP address blocks: 103.173.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Validity
Not Before: Oct 21 00:43:43 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6715a3bf-e1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:63:60:5d:58:29:fa:87:43:b6:38:aa:76:
ae:7c:38:b3:57:1f:e4:75:48:4d:64:cf:d0:a1:76:
98:16:c4:f0:ec:27:91:7f:15:6d:7e:7e:6a:15:9a:
f3:9e:45:4d:87:55:c5:8e:9d:24:07:7e:28:12:de:
ec:81:14:9e:cd:e7:43:e3:f5:5b:d5:40:d7:f3:29:
e8:64:4f:6a:b1:c5:ba:16:dd:c7:6d:bd:7f:93:ac:
9b:34:f1:60:8a:fd:c7:53:2e:55:c8:34:91:fa:04:
72:cd:f7:87:ce:6c:f3:e0:79:41:12:40:50:a2:fc:
ea:ec:17:04:14:e5:32:08:2f:24:f3:e6:6a:e2:ee:
d8:f6:0f:ba:e3:01:25:b5:c1:71:c1:a7:cf:b6:56:
1a:81:38:9d:8c:34:a8:50:4a:be:da:e9:87:11:84:
b6:b8:a7:72:81:42:94:ae:3a:ea:64:5a:46:95:58:
51:51:d7:80:06:9a:f1:84:83:75:8d:41:f1:c7:2e:
2f:e1:37:92:2b:2e:3f:a0:5b:cb:cb:ed:a0:78:0c:
a6:a6:b2:42:10:c1:89:0f:07:dc:c3:ad:26:28:7f:
4c:ac:2d:5b:6a:5f:06:b8:76:14:e2:91:b4:c8:91:
f7:84:77:9f:83:c3:13:24:73:9f:71:1c:06:34:ae:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:49:AD:1C:4E:F4:2F:33:8F:CF:5C:16:F7:47:00:12:C2:A2:83
X509v3 Authority Key Identifier:
keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e6:02:0c:eb:fe:97:f4:4a:0d:1f:f2:d6:3f:94:66:48:a6:
50:c1:83:63:75:02:23:30:94:21:b0:fc:b3:24:60:ba:76:69:
e6:b1:b3:19:dd:88:81:b2:89:92:87:3e:4a:43:bf:ee:5c:8d:
a4:46:4b:5a:e1:3e:44:ac:c1:10:f8:4b:17:2c:87:3c:88:63:
c5:25:9b:2c:ff:ce:e8:95:62:c2:51:33:f9:6c:cc:fb:92:30:
0c:9b:40:1f:25:0a:8d:cf:c0:76:5f:8e:1e:06:25:3a:b0:c6:
6a:ba:bb:cc:4d:93:10:d6:3c:8c:fa:48:c7:76:b3:c0:5d:67:
0e:a7:81:42:da:ef:04:b9:1e:fd:e0:dd:ca:65:a2:9d:1f:bf:
88:94:53:37:01:db:10:3c:70:50:ef:2d:0a:93:2d:36:9a:66:
44:ec:9d:b7:3d:dd:fb:c2:20:d1:42:bc:ea:53:bd:d3:0c:05:
e9:85:03:09:b9:9f:7d:0e:b8:3f:b1:0a:72:ed:30:9f:2c:60:
c3:90:78:d5:17:cd:67:1b:6b:d2:95:77:6b:b2:32:b7:bb:00:
db:95:c4:59:51:93:ef:a2:27:d1:86:3c:e7:74:e5:bd:6a:91:
e5:c7:89:d3:a5:b3:d0:de:4b:34:2a:c4:8e:b9:ed:4f:33:2e:
32:2a:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:04:56 2025 by rpki-client