Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
File: 5EEC619850A611EA823DE980C4F9AE02.roa (raw, json)
Hash identifier: AxteJTYQfKhzHJcNDMSvPfiq/UKu+BhiRHq6hallwyw=
Subject key identifier: C3:94:96:E5:97:B1:71:3D:04:68:B2:B9:F6:5E:49:1E:B8:11:59:78
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 09CD
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
Signing time: Fri 02 Feb 2024 20:38:38 +0000
ROA not before: Fri 02 Feb 2024 20:38:38 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137416
IP address blocks: 103.107.132.0/22 maxlen: 24
2402:55c0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Validity
Not Before: Feb 2 20:38:38 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bd52ce-7829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:c3:54:23:4f:22:20:f1:1c:bc:99:4b:4e:
12:53:cf:cd:14:d5:28:53:80:e7:d1:e5:64:91:db:
8a:b7:28:54:74:a2:ab:c5:7a:7d:ba:1b:39:47:2c:
b2:8c:60:d1:c1:c5:8b:ca:97:4d:a7:82:65:e2:9c:
cf:c8:3c:2f:81:9f:4a:24:34:45:12:0b:a5:e3:8c:
c7:78:ee:9c:66:c4:3e:01:e9:9e:9e:b1:2b:39:8a:
29:5d:13:cc:74:ca:2c:bb:8e:ae:87:c0:71:cf:8c:
40:86:fb:02:56:8f:81:8f:62:03:ca:6d:32:4b:d1:
3e:32:80:73:71:4e:5d:71:1c:c9:07:f9:0a:c5:73:
c9:18:20:e5:1f:14:a9:07:9c:ad:c1:20:8d:8c:d1:
ff:8d:0a:a8:75:aa:cb:2c:66:94:45:e2:49:43:ae:
2a:1a:a8:5b:08:6a:11:d1:30:86:97:19:be:23:d4:
46:10:98:d7:b5:48:83:4a:bb:0a:63:80:3d:af:b9:
73:9f:df:ca:35:9c:36:ba:6a:2c:2a:b3:e0:6b:c5:
d8:22:e3:87:23:a8:fa:cc:2d:a6:e6:b0:39:74:97:
df:67:5d:25:29:9f:61:3d:fb:d0:d2:e6:c1:52:bb:
51:64:01:f5:74:98:8e:cd:1f:1f:08:bc:6e:be:c9:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:94:96:E5:97:B1:71:3D:04:68:B2:B9:F6:5E:49:1E:B8:11:59:78
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.132.0/22
IPv6:
2402:55c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:8d:c5:3c:14:5e:33:f2:60:71:57:8f:af:12:b8:68:7a:25:
90:74:2f:44:3b:be:65:4a:62:1e:aa:18:53:d5:61:09:bb:dd:
fa:19:e8:97:16:9f:6f:2e:51:22:48:36:00:e2:32:37:12:40:
98:ce:92:93:88:f1:00:34:96:e5:d9:03:6d:fb:44:b4:a0:ed:
d2:83:ae:10:de:25:b0:8a:67:cf:bd:24:5f:07:2f:5c:27:15:
9b:e6:c3:3a:57:be:07:6f:b4:9a:31:ab:d8:4e:ca:e9:b2:af:
df:d9:b7:de:0b:4a:46:40:ca:a7:fd:d7:ab:2e:85:4c:ac:fc:
bb:b3:78:07:2e:0d:71:64:00:d9:ce:bf:b0:63:a5:09:4c:7e:
84:63:cc:fc:18:74:d4:20:e1:07:19:71:67:2c:2f:2e:e4:f2:
ed:be:67:0d:59:93:5e:13:06:fb:4a:0c:b2:6e:39:33:24:de:
96:98:c4:7c:03:fe:47:de:f1:e7:de:5e:83:98:96:43:5e:b1:
56:5c:5f:58:ff:8f:df:57:08:9c:3f:30:5a:32:ef:38:61:ec:
2e:ab:0c:b7:6f:b6:31:47:92:2b:9a:8e:bb:d7:65:72:a9:60:
1c:a1:0d:dd:df:b8:49:6f:37:6c:ef:9c:8c:d9:aa:38:d7:cd:
03:d0:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:41 2025 by rpki-client