Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2A1068EAC1EC11EF80524527C4F9AE02.roa
File: 2A1068EAC1EC11EF80524527C4F9AE02.roa (raw, json)
Hash identifier: JTBrDT7QgkPBlgX6wtnnIJo3A+vkcgJipRPgjmKsQwA=
Subject key identifier: 8D:2E:85:85:FC:F7:92:7D:08:FA:53:57:17:E5:10:7B:8C:F9:C8:B8
Certificate issuer: /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial: 0522
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2A1068EAC1EC11EF80524527C4F9AE02.roa
Signing time: Tue 24 Dec 2024 11:42:34 +0000
ROA not before: Tue 24 Dec 2024 11:42:34 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137703
IP address blocks: 103.146.134.0/24 maxlen: 24
2001:df2:6080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Validity
Not Before: Dec 24 11:42:34 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=676a9e29-30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:ab:6c:39:97:0e:91:f0:d7:45:85:e1:74:
65:f2:4c:d1:03:87:42:e0:d0:07:47:07:2b:35:a4:
df:16:20:8d:2d:38:c0:12:d4:74:a2:4e:2a:c3:eb:
14:a4:3c:84:51:5f:21:45:8f:97:3e:29:94:4d:ac:
4e:2c:bd:5d:b9:ea:9a:42:55:7c:d9:df:9d:af:cd:
35:d3:a5:bc:8f:1c:98:49:ce:a7:b7:cd:db:d5:eb:
84:fc:19:58:72:27:6a:44:49:9c:e1:b2:38:41:47:
85:f1:87:9b:02:e8:a0:c3:eb:64:0c:19:20:35:2d:
53:6e:60:b2:8e:6f:c7:89:42:40:07:24:0b:05:03:
60:c9:f1:58:95:60:c2:c9:b4:ab:4e:c6:1c:73:8f:
b1:d9:80:ef:4c:21:d6:20:e4:d1:ac:bc:35:89:c0:
ff:db:39:44:13:f2:1d:da:b1:6d:66:51:b2:9e:c3:
41:1d:7e:fa:0c:63:2c:c2:a2:63:61:5e:70:ac:b8:
b0:90:98:34:0f:80:37:d2:1c:31:e9:d5:22:9c:34:
47:32:bc:ee:56:82:d3:37:db:ce:90:93:91:2f:13:
bd:98:0c:92:85:18:51:f7:d3:13:a6:0b:b4:cb:5d:
f2:87:bf:e6:bc:5d:c3:32:d7:ab:bd:2d:29:56:4c:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:85:85:FC:F7:92:7D:08:FA:53:57:17:E5:10:7B:8C:F9:C8:B8
X509v3 Authority Key Identifier:
keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/2A1068EAC1EC11EF80524527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.134.0/24
IPv6:
2001:df2:6080::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ac:f2:93:bd:e4:96:90:b6:bb:85:6e:9f:ce:1c:46:77:6d:
51:92:30:12:80:a2:f8:50:ec:98:a6:64:6a:20:28:69:22:fa:
ea:77:41:b5:06:e2:20:6e:4b:52:0e:52:ef:dd:04:56:52:8f:
81:5f:68:6a:6f:02:d5:11:fe:46:26:b9:ec:c6:37:36:61:22:
62:01:46:47:8e:ac:d2:87:ac:30:3a:51:77:82:e8:61:0b:4e:
e9:6d:f4:ae:ef:32:bf:ce:c5:55:b1:61:c1:e2:5b:8c:5b:66:
00:62:bd:f6:c4:be:12:f2:e5:32:be:50:5c:97:28:03:ef:4e:
e0:e8:40:1e:2e:6a:d8:56:db:65:b5:19:af:fe:2e:12:02:e2:
6d:ae:d2:c8:64:51:ca:4e:0d:a9:18:cd:b2:60:56:3f:1c:db:
13:35:cc:2c:76:56:64:f1:1a:d6:33:6d:39:61:0e:17:cb:c5:
f8:cd:09:55:33:11:a4:d1:37:7b:12:59:4a:e4:3c:35:eb:80:
bc:1c:dd:c4:90:a7:88:a0:e9:3e:60:bb:9f:86:90:74:8b:1f:
f2:2f:e3:32:00:35:d9:52:8c:82:e4:8c:54:db:a0:54:c2:57:
f0:cb:61:1a:11:96:e3:93:58:07:41:25:7e:56:8f:6c:e7:e7:
a6:a4:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:32:02 2025 by rpki-client