Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
File: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (raw, json)
Hash identifier: zDC4POi/dThAbHtgsplFEXgo+0R27HuDtCIu846C5u4=
Subject key identifier: 09:2F:47:B4:81:DC:29:5A:91:E9:2D:80:35:28:32:D9:DE:CB:5C:2A
Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial: 0136
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
Signing time: Fri 09 Aug 2024 19:20:57 +0000
ROA not before: Fri 09 Aug 2024 19:20:57 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134952
IP address blocks: 103.85.182.0/24 maxlen: 24
103.85.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Validity
Not Before: Aug 9 19:20:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66b66c18-52b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:72:39:91:d4:cd:42:12:03:cd:68:0f:59:
30:da:d3:84:00:7d:00:c1:44:bf:8f:fa:4d:d5:c2:
64:07:3e:26:07:08:b1:f9:86:24:1f:6b:9f:05:a7:
b2:3e:7d:0a:9e:a0:23:1f:0c:74:20:d0:99:a3:f9:
3b:70:9a:6e:97:9e:13:d2:27:13:ec:9e:d4:3c:03:
66:b4:63:47:92:26:b0:75:ec:08:07:04:7c:76:aa:
bf:64:5f:69:35:e1:07:a0:b8:25:4a:cd:65:2d:a0:
e0:f4:69:9e:94:01:ac:ae:dd:e7:45:65:25:1a:d9:
ac:ce:13:5f:cd:a9:10:e1:9f:4e:8f:64:bb:dd:db:
ba:62:8a:7e:10:eb:0f:f9:6e:46:98:45:b5:e0:63:
8e:4d:6c:fe:dc:74:48:5d:8c:27:d1:49:ba:b4:15:
14:7d:5a:df:4a:48:28:0e:a0:32:ea:fc:4d:54:8e:
4f:e6:57:a8:5c:cd:2f:66:ee:cd:9a:ee:b8:47:9a:
54:85:6f:18:c4:b8:10:f8:24:66:0a:20:17:30:89:
17:d3:8b:74:e4:52:66:b2:0a:02:12:8a:8d:5b:69:
dc:76:7b:2f:aa:f8:9e:ca:3f:30:00:22:74:6a:f5:
b3:cf:1d:98:fd:b1:94:0c:e3:1e:a5:27:b3:93:4c:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:47:B4:81:DC:29:5A:91:E9:2D:80:35:28:32:D9:DE:CB:5C:2A
X509v3 Authority Key Identifier:
keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/6B4DE806568411EF8FE2C24EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.182.0/23
Signature Algorithm: sha256WithRSAEncryption
16:2e:30:f7:1b:d1:a4:bc:db:ea:05:fc:fb:87:f1:24:5a:77:
e0:29:6b:7b:4c:64:f2:7a:7a:51:51:ea:72:a5:e9:3f:91:e0:
62:03:3c:a8:51:82:a6:16:8d:e6:7a:d1:43:8a:0d:5a:15:f0:
0f:1e:16:f2:9e:01:db:68:28:29:3a:f3:86:14:aa:1e:f8:0d:
8c:8e:e4:84:fb:0c:47:3c:f9:d5:7a:c9:0d:f0:f5:28:81:12:
bc:9f:b1:c9:54:4d:59:42:9f:57:01:60:5c:54:08:4a:54:72:
95:53:e2:2d:17:0f:f1:3e:f2:0d:99:ee:7a:e7:1f:50:d7:4d:
28:1a:47:44:5c:0f:66:8b:2b:85:5a:b1:d7:c9:50:01:fe:fb:
0e:e4:38:9f:41:38:0d:77:aa:c7:12:ea:6a:34:9d:3f:4c:28:
1c:84:62:ce:2e:70:b8:05:8a:27:ee:de:c6:c0:2e:d9:39:3e:
e4:9c:12:de:79:fb:fa:50:30:0e:fc:42:44:47:b3:3c:a9:3f:
33:00:21:af:70:e0:7b:96:db:14:1c:9b:74:cb:00:72:0e:2d:
7a:3d:31:19:23:50:08:1d:1a:43:ed:50:6b:d9:82:54:13:d6:
bf:d2:6c:bf:a4:f6:d0:cf:d4:f2:35:3c:1d:02:2e:08:43:f5:
86:c2:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:36 2025 by rpki-client