Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
File: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (raw, json)
Hash identifier: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=
Subject key identifier: FA:00:9A:74:77:63:34:ED:ED:FA:98:14:DE:90:17:8C:2C:7B:4F:08
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 04A3
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
Signing time: Thu 03 Oct 2024 00:03:56 +0000
ROA not before: Thu 03 Oct 2024 00:03:56 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 147070
IP address blocks: 103.172.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Oct 3 00:03:56 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fddf6c-d77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:0b:85:43:d3:49:b0:87:0e:16:94:93:63:
06:23:c4:c8:d1:27:00:c2:64:58:30:89:16:fa:81:
20:b0:71:9b:46:5e:ad:f0:76:2c:b0:32:47:ad:5c:
a4:2e:dd:6a:a1:f6:25:d9:c7:90:b8:e7:3d:09:f4:
6f:b7:49:c8:2a:6e:b2:02:98:60:56:e9:15:30:c3:
89:08:52:66:31:3b:1f:7c:20:74:e4:59:91:e2:36:
7f:74:14:fd:c5:e6:5e:a7:45:5a:56:08:36:57:8a:
35:fc:4b:10:03:6b:b9:2c:3e:50:c9:8b:07:68:eb:
3e:70:9d:9c:e1:70:a9:1c:c7:f4:b0:a2:8f:3a:d8:
75:aa:26:89:07:7d:ee:ae:da:fc:53:29:59:a6:2a:
6d:e2:05:98:de:58:10:15:a9:30:16:3c:05:e5:c9:
18:b3:e3:f5:3a:20:26:4a:e9:7c:88:20:9d:07:27:
f2:42:6f:e5:69:36:c8:65:af:f1:89:09:63:9c:f7:
e1:a9:c1:4f:64:67:ed:56:09:e2:ac:d7:23:66:e7:
32:59:da:5c:a6:56:9c:14:1b:e3:0e:0e:f3:34:ec:
87:ef:18:1d:a0:7c:34:05:09:4b:4e:df:bf:eb:ef:
09:bc:ef:7d:88:63:dc:25:be:5a:da:c4:d2:6e:cd:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:9A:74:77:63:34:ED:ED:FA:98:14:DE:90:17:8C:2C:7B:4F:08
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/90AEB6B26C0411EF903ED20BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.114.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1a:b9:59:11:68:58:64:07:50:43:47:19:fc:31:57:b8:a2:
1d:84:49:65:1a:d4:d6:8d:15:ca:75:3c:96:e1:36:a9:e0:12:
68:c7:f7:8f:61:ec:9f:6b:0b:d0:d4:e1:76:5e:0e:4b:a7:2e:
5a:43:b5:40:ca:74:89:c4:fd:39:cb:9f:c3:95:64:2c:2a:34:
21:56:90:05:9e:59:14:93:06:da:4d:81:0f:41:45:75:6e:4d:
a3:48:de:17:2c:ac:1c:f5:59:4b:7f:62:48:1a:87:c0:fc:f9:
cc:e2:36:35:14:47:74:19:df:6a:c9:cb:9d:8a:83:eb:9e:dc:
0d:b8:05:1f:98:19:87:42:b6:90:47:74:19:10:c2:62:22:99:
41:b8:2e:95:ac:a7:5c:13:b2:37:0c:a1:0a:07:02:57:03:36:
32:09:38:6a:18:73:48:a4:79:b8:2f:e0:78:6c:07:63:95:89:
a2:79:3d:03:42:5c:71:95:bf:cc:f6:1d:13:21:bc:15:0d:e2:
04:a9:14:eb:09:d3:24:b6:bf:65:ec:2e:b0:5d:78:4c:fd:6f:
fd:d1:e2:1d:da:08:cc:5f:5c:a0:f9:3f:4d:0b:3e:4f:4d:76:
85:fe:7e:4c:d7:47:c4:b9:be:82:4b:7d:da:28:9f:2f:b0:c8:
5e:84:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:46 2025 by rpki-client