Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
File: 448983A8892D11EEB4AA276EC4F9AE02.roa (raw, json)
Hash identifier: xXj+TZCLhrIdzyPWF6AJ+EZHZBHKwdF6FraC4iYNXC4=
Subject key identifier: C0:E1:CC:6A:8E:3B:01:90:D1:60:1E:57:EC:DD:4B:C8:06:16:EF:75
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 65
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
Signing time: Fri 31 May 2024 09:19:50 +0000
ROA not before: Fri 31 May 2024 09:19:50 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 151325
IP address blocks: 103.254.91.0/24 maxlen: 24
2001:df2:6b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: May 31 09:19:50 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66599636-b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:3a:e6:9f:54:10:9e:cd:21:ea:9b:77:d1:
06:86:74:8b:ae:66:8a:18:a0:92:7a:dd:d8:1f:23:
27:35:2c:de:52:42:ac:47:67:a1:bd:9d:0d:a3:61:
bd:01:10:5a:34:95:b7:ff:58:40:cc:d9:41:d7:58:
df:2b:cf:16:f8:57:8d:98:c1:4b:aa:98:71:81:86:
6c:84:db:84:cf:7c:54:9a:86:82:5d:43:0f:d7:ed:
a5:4d:66:c3:38:98:78:94:dc:42:05:1d:a6:e4:07:
f7:d7:b1:7e:a4:c9:1a:fd:8d:2d:c7:fa:5b:0a:19:
30:d4:ad:83:11:d8:15:97:d1:40:e6:cd:fd:0f:c3:
f3:5e:41:cf:5e:0e:36:9d:58:f9:e8:c1:d9:af:09:
0c:6d:3f:b2:c1:7b:e8:85:1d:df:9d:8b:fe:59:68:
9b:d3:ea:1d:69:fc:5c:18:ef:fb:5d:07:1f:46:f3:
95:db:2d:88:0f:35:ec:c2:dc:32:28:5a:3b:ad:c0:
fa:06:50:fd:2d:99:19:68:72:1f:e3:58:76:16:4b:
c3:2b:12:9f:ca:4a:a1:ed:91:7d:b6:e9:1d:4c:64:
8b:87:24:47:c0:4a:66:64:f5:f5:95:03:ba:7d:3c:
56:c2:8c:22:1d:8f:40:7c:c6:8f:ba:72:58:32:ac:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:CC:6A:8E:3B:01:90:D1:60:1E:57:EC:DD:4B:C8:06:16:EF:75
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.91.0/24
IPv6:
2001:df2:6b40::/48
Signature Algorithm: sha256WithRSAEncryption
b3:2e:9c:8b:1a:9d:41:bd:f9:58:97:1e:ae:85:c3:2e:c0:b7:
a5:0e:0e:6a:10:d0:65:9f:0c:3b:0f:f6:20:ab:8e:98:3c:17:
ca:a0:d6:66:5c:94:21:68:98:f3:84:a4:45:5b:1b:b3:6e:ec:
c9:4f:56:3e:78:e8:be:c0:02:5d:f3:fc:ec:0f:b6:71:b1:4d:
91:2c:de:41:07:f9:53:6a:9c:f3:78:34:ad:97:fb:bd:1a:40:
a1:6e:fc:a0:5d:8e:ec:51:d3:c7:63:a7:02:2e:26:be:59:69:
d0:32:ab:e6:89:8d:f1:64:f9:e1:83:92:ae:85:da:a6:0b:5e:
48:37:93:57:c2:a7:a0:4d:b9:3c:60:4c:40:c0:5b:4e:68:a2:
78:88:8a:96:72:f1:7d:a7:9b:9c:b8:72:01:2c:cb:90:ac:78:
4e:75:1f:a5:33:58:ef:65:3b:70:59:ce:0f:c1:b3:2b:4e:6e:
e4:84:1c:e5:65:33:5c:62:44:bf:8e:b2:87:bc:dc:d4:3b:fe:
00:4a:f0:cf:c9:43:56:29:8d:34:49:30:e9:2b:05:1f:13:59:
73:0d:27:2b:0b:cd:c9:95:87:1f:16:d0:90:8c:d9:5c:fd:df:
70:e4:52:e0:aa:7f:ec:b8:c8:5b:d6:11:2a:3f:49:aa:16:7d:
5b:e0:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:46:33 2025 by rpki-client