Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
File: 01553E10396311EAB24C5A5FC4F9AE02.roa (raw, json)
Hash identifier: rs0VbwQOx7elbsUZDFIThAHCStbl8j3g8d0JAoWIucc=
Subject key identifier: 0B:A4:6B:88:A2:D6:BC:E5:21:08:60:14:FE:30:25:22:77:29:86:9D
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0A73
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
Signing time: Tue 16 Apr 2024 20:29:25 +0000
ROA not before: Tue 16 Apr 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55497
IP address blocks: 103.4.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Apr 16 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661edfa5-054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:a3:ff:29:b2:d0:dd:5d:f3:d9:9c:46:e6:
7c:d1:d0:99:3d:a5:20:92:39:89:f8:ca:40:8c:a1:
b2:a9:97:8e:f9:5b:2e:88:58:68:e1:68:3b:df:31:
89:62:e1:4a:01:f6:c4:34:97:19:d3:f3:63:1f:6b:
13:8f:bb:dd:46:ef:80:53:24:6f:d0:19:1f:70:05:
87:17:11:dd:37:44:8d:b1:8d:1c:18:3a:f5:48:7a:
96:13:b3:c0:9a:1b:f2:32:3d:f7:81:90:b8:a5:f7:
fb:f1:1c:7e:b9:e5:d2:39:40:50:b0:69:5c:4f:8c:
2e:ef:96:93:93:51:4f:7f:7d:b7:69:51:a4:75:ef:
d6:ab:b9:80:48:0a:55:99:88:9e:bd:12:e2:9f:86:
c5:8c:f2:ff:b6:9e:69:5f:c3:bb:89:c0:26:f2:04:
df:c3:f3:7a:33:db:73:18:4a:5d:5b:49:95:73:66:
90:2b:7f:0d:7c:5e:4d:a0:46:d7:2c:2b:43:52:56:
87:ab:29:d2:2c:5b:73:d9:4c:ba:37:27:27:0f:42:
ba:9e:a0:84:25:f1:86:38:7a:01:e7:f2:65:6a:e8:
b7:33:2b:ae:b9:1b:fb:63:0f:ee:55:c8:3d:75:20:
09:ea:40:d0:1f:c4:d6:fe:84:74:0c:d6:a1:8b:65:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:6B:88:A2:D6:BC:E5:21:08:60:14:FE:30:25:22:77:29:86:9D
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.114.0/23
Signature Algorithm: sha256WithRSAEncryption
17:9d:f7:8a:90:3b:b7:cb:59:44:09:33:03:80:a9:c8:a4:8d:
ab:6b:fb:d0:6c:ce:86:c0:45:cc:a0:d7:c3:7f:e3:c9:9e:0a:
e2:ba:3b:2a:f6:07:7c:1b:62:bb:10:f3:6e:68:9c:4a:7c:ed:
b9:e8:a1:72:7b:d9:05:91:87:11:f1:25:10:34:54:67:71:ef:
d6:88:bd:18:3d:35:29:f8:97:34:7e:d2:43:59:70:d0:85:f7:
d5:26:7e:7f:30:12:a6:00:bf:06:27:ae:a9:b7:e4:b0:b4:4e:
59:79:c6:7d:ea:9b:17:a0:20:d6:e8:d1:ca:28:86:81:7f:e7:
f1:98:96:ee:1f:3f:4e:c9:62:84:fc:70:31:e7:f5:05:de:8f:
7a:ed:23:36:91:db:be:49:22:ad:be:14:80:61:1c:de:45:a8:
d3:4f:d9:5d:09:15:5d:f7:7c:55:32:f8:b0:80:37:ad:a0:2d:
7d:a6:0c:5d:fe:f9:91:c3:06:c9:9d:0d:89:da:9c:76:eb:bf:
2f:12:70:ca:5b:38:41:26:72:48:e6:4d:88:41:f5:29:00:9d:
76:d6:ca:c1:4b:5e:f0:74:de:4e:e5:f9:1a:12:bf:2b:5a:94:
c6:43:83:73:61:a8:7f:45:36:6f:bc:08:37:a1:4f:ae:e6:a1:
51:0c:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:38:36 2025 by rpki-client