Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
File: 4D608CC0800211EF81167A23C4F9AE02.roa (raw, json)
Hash identifier: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=
Subject key identifier: AB:41:EE:3C:CF:2C:BD:D4:E2:1F:A6:F3:FF:CF:4C:49:7F:0B:39:D3
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 0236
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
Signing time: Fri 29 Nov 2024 01:54:39 +0000
ROA not before: Fri 29 Nov 2024 01:54:38 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 214766
IP address blocks: 103.102.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Nov 29 01:54:38 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67491ede-fc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:f0:3e:41:2c:6d:15:89:8a:13:10:45:2c:
2a:b6:8d:a1:6f:27:dc:9b:19:89:3c:31:b1:d5:95:
fa:07:31:c4:8f:c9:fc:ee:93:4b:b8:ab:fc:a8:35:
08:fa:df:67:c6:fa:92:44:fa:34:88:02:6a:ee:aa:
98:2e:b8:e6:f7:3b:14:9b:08:0a:16:60:84:03:b2:
8a:a7:cb:f3:a3:9b:ab:aa:82:b5:0b:09:48:56:e4:
43:8b:85:4d:f8:c4:70:9d:bf:82:fa:af:cd:fd:62:
64:2c:37:e1:76:60:1b:30:5f:9b:2e:7c:6a:1d:ca:
2c:d1:ab:fe:db:a4:f8:3d:65:3f:eb:cf:43:f5:bb:
b4:9d:70:35:a3:c4:4f:f8:f9:5d:20:6f:28:f5:71:
5f:ce:fd:d7:0d:86:86:6b:c5:17:5e:03:2d:5f:6b:
ed:53:7d:d3:a7:c1:19:1f:62:a2:2e:68:64:e5:19:
fc:ee:43:11:ee:f6:06:26:8b:dd:ab:c8:38:57:f2:
d7:7b:3d:2e:6e:91:98:37:e6:e6:76:30:21:85:6d:
26:f3:b9:2b:34:45:28:54:12:32:fa:bc:a0:12:3d:
6d:18:71:8f:97:fe:6c:f2:1a:1f:19:44:1f:9d:9b:
fd:f5:1a:e5:b5:88:14:8c:92:72:aa:33:8b:f7:fc:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:EE:3C:CF:2C:BD:D4:E2:1F:A6:F3:FF:CF:4C:49:7F:0B:39:D3
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1f:ec:a3:1e:7a:6e:ad:a2:e0:95:66:36:21:88:40:d8:07:
f9:b9:19:f3:e4:3c:11:d0:4a:0a:fe:46:8d:81:37:f7:36:69:
4c:19:40:b0:6c:75:0c:2e:6b:a2:b9:20:a1:92:5d:71:81:3c:
d0:b3:1d:a7:ff:48:2b:21:7d:a7:b4:de:8d:55:08:66:e5:5e:
fc:ad:4c:96:30:5f:d8:10:de:b2:a5:1e:51:52:4c:8e:1f:e6:
d0:dd:b0:e7:58:2f:e6:c6:4f:44:78:bb:fe:da:21:6c:30:ca:
0f:5c:86:24:b0:7c:31:27:19:ee:16:66:33:e7:89:e6:94:ec:
4a:40:09:ca:51:29:0e:13:a4:0a:8b:4a:26:d4:3f:db:52:95:
ed:b6:c0:ba:f8:f4:71:3c:36:e3:d2:7e:da:64:6c:cc:b6:c4:
15:34:f3:4c:91:ab:bd:c8:1e:2a:10:9b:3e:e9:32:95:b8:66:
b0:21:76:3e:a2:d5:60:15:62:77:25:92:5a:98:29:4d:5c:30:
1e:95:84:f8:57:84:4b:0f:4a:45:d2:79:cf:bb:50:f2:c8:d7:
2d:9b:6e:4c:cd:c8:db:23:64:d3:e3:87:a8:95:92:75:e6:a9:
6a:12:27:74:66:0d:d2:03:5e:8f:6b:e0:04:dd:f4:dd:f1:da:
54:f9:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:05 2025 by rpki-client