Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa
File: 8DB35F6A766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier: 5GXMULODPH55klADGmbXCGRoSkzNyH5a8JpZ/WW8nU4=
Subject key identifier: C1:1D:71:8E:ED:9D:74:46:87:2E:96:BF:91:A6:25:F7:FB:5C:B4:36
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 0310
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa
Signing time: Thu 19 Sep 2024 09:00:01 +0000
ROA not before: Thu 19 Sep 2024 09:00:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139855
IP address blocks: 103.183.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Sep 19 09:00:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ebe811-0061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:be:a3:b6:d7:7d:c3:0d:25:38:e1:d8:1c:
bc:06:4e:69:23:84:3b:75:c8:6f:e4:de:10:b2:a5:
91:0a:c4:41:c1:b8:21:bd:08:4a:77:81:18:aa:58:
08:1c:64:7f:ce:68:5e:06:e6:32:67:99:cd:c6:64:
cd:3a:26:cb:1c:62:aa:c2:5e:39:68:ae:d4:d9:c3:
f4:84:fb:37:a4:b8:41:cc:9a:c9:34:b8:5e:56:67:
cb:33:04:81:b6:37:72:da:47:6f:c7:7f:27:b7:5f:
df:ce:2d:28:55:81:5e:c4:30:4a:03:a4:fb:97:94:
51:e0:0d:2e:a8:7d:ff:a3:65:77:d4:2a:87:70:ca:
32:1c:bc:42:90:c5:ed:cd:16:62:53:bf:5d:76:27:
46:1b:f1:6f:38:cc:ce:74:a6:1e:d0:43:d7:0f:de:
d1:f5:e0:d3:5e:4f:c3:d2:1a:cc:68:00:ed:f8:16:
42:ee:81:58:14:c2:16:81:e6:91:d1:57:0f:dd:c8:
89:21:ff:0a:4a:b9:ab:bc:85:38:79:b9:a0:5d:29:
c8:7c:c0:56:1b:80:fa:94:b1:fb:4e:81:af:25:65:
a6:6a:a9:db:37:81:74:63:75:86:76:25:24:9d:41:
b0:60:10:c6:c9:16:5c:7b:5d:4c:90:f6:8f:ad:2c:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:71:8E:ED:9D:74:46:87:2E:96:BF:91:A6:25:F7:FB:5C:B4:36
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.246.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fe:7a:72:d0:f5:be:69:a2:3e:ca:1e:2d:00:83:98:bf:fd:
50:5b:a8:a3:37:59:ba:9e:08:00:14:68:13:d5:2a:9a:44:a3:
0f:dc:7f:2c:f6:e5:a7:b7:bb:51:4d:c0:80:27:d5:61:9a:51:
58:ab:f7:4d:73:b3:9b:ae:57:52:7b:4e:cf:2a:f7:38:b0:a9:
cd:07:b5:db:9b:49:83:3b:5a:61:79:11:96:0c:fd:fb:d9:98:
29:32:33:c4:f9:0e:a9:c7:32:b5:da:c0:a5:04:8d:76:f9:e6:
03:4e:1f:a7:9e:c8:3c:a4:bd:1e:3a:48:75:30:f2:47:54:f1:
42:a4:88:19:33:65:55:a9:fd:be:0e:d0:9d:de:84:64:a8:ca:
2f:bb:67:c1:c8:8e:d6:38:7e:e3:ae:50:17:6d:80:c9:1e:26:
fd:df:59:25:0a:d5:3d:80:06:10:15:41:42:63:df:0c:65:9f:
92:75:89:b2:e4:75:97:b0:43:57:b2:7f:c1:c1:7d:8f:2b:96:
e5:ca:e2:9e:6d:1d:e4:81:1f:1e:a9:0d:8b:45:f5:8c:75:0f:
45:c1:de:3f:df:7e:c8:f9:63:ad:b9:00:e1:7a:0e:93:10:79:
f2:b1:55:7a:4d:ca:2b:82:4c:2f:e9:17:2c:51:89:a1:b8:d1:
04:f6:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:26:07 2025 by rpki-client