Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
File: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (raw, json)
Hash identifier: NvR9oTP8aVtW41+HpR5ZnWPqrkmQ4StnKs9ffYZOrLM=
Subject key identifier: 35:A7:1A:8E:3B:97:D2:C2:3B:F0:F6:24:A4:7D:7C:4D:A6:45:0A:FC
Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial: 02F8
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
Signing time: Fri 29 Mar 2024 03:05:15 +0000
ROA not before: Fri 29 Mar 2024 03:05:15 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 149499
IP address blocks: 103.181.70.0/24 maxlen: 24
103.181.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Validity
Not Before: Mar 29 03:05:15 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66062feb-f0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3d:ad:8a:66:63:3b:ad:8d:21:31:5b:13:29:
46:ec:f2:0b:3c:8a:d2:3a:eb:0d:84:5a:a6:1a:0a:
07:84:42:01:c9:64:96:79:2e:3b:1a:c8:8e:54:80:
7f:af:72:06:6b:28:62:41:91:20:10:3a:8b:c9:db:
b3:5f:58:38:a8:29:7c:53:4c:eb:ee:9e:1f:b0:8b:
e4:18:30:ab:e3:f1:eb:69:29:f9:38:08:b8:07:a4:
5b:64:90:ef:47:08:8f:ed:d2:9c:3b:43:09:e6:08:
7b:3f:67:4d:e2:d2:77:14:b2:a8:10:c8:86:ff:97:
7b:56:5f:63:b6:93:22:8c:93:3a:4a:b2:41:9c:73:
f0:e9:23:41:f7:5a:3c:4c:b4:f2:59:5a:76:56:d9:
7e:eb:94:02:ea:05:20:cb:0e:ff:a2:ed:61:fd:3a:
94:12:93:ab:34:fa:4a:30:b0:d7:21:d8:28:46:8a:
0b:4c:e5:64:2f:6b:b8:1a:00:15:14:c7:0e:2c:3a:
66:1f:46:6a:66:f6:64:bb:7c:06:a2:a2:62:ff:c4:
16:9f:d3:b4:c0:71:cf:eb:97:f6:cd:9a:62:24:32:
09:1f:8c:7d:81:aa:d7:c3:5e:4b:71:c9:ce:b0:39:
00:a4:be:d5:c6:82:81:7c:f0:42:3a:18:15:4b:c9:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:1A:8E:3B:97:D2:C2:3B:F0:F6:24:A4:7D:7C:4D:A6:45:0A:FC
X509v3 Authority Key Identifier:
keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:0f:18:59:18:d7:ec:a0:f4:15:73:80:72:8f:60:7a:35:1a:
67:1a:c3:f4:56:de:bd:55:f1:c5:c5:ef:f5:57:ac:81:f3:b7:
22:47:b5:06:7f:f6:02:47:bd:b3:e8:66:18:dd:f3:af:36:00:
54:ae:c4:b2:f7:0c:d6:f0:0d:0d:b2:f6:18:1c:87:f5:e9:23:
dc:ea:24:04:ca:4e:2c:b9:b0:95:b5:9d:86:60:89:0a:d3:ab:
3a:ee:1a:7a:2c:8d:4f:1b:53:43:ad:72:35:88:29:8d:4b:8f:
31:2e:30:b0:3a:c5:7e:d3:c0:9d:c9:4c:f2:94:cb:94:82:4c:
52:ce:d8:65:63:a0:c7:da:24:4d:08:4f:0c:9e:03:80:b0:41:
f2:2b:bb:42:82:2d:9f:39:1a:5e:5e:b3:d0:74:2f:fd:32:d9:
47:2f:b7:56:29:5e:b4:e0:cf:8a:cf:54:18:97:a0:cb:0b:a6:
8a:ed:66:ff:26:63:b2:a2:96:9e:2a:b8:48:65:aa:bf:ab:31:
7c:b7:2b:18:66:fb:cf:54:31:1b:79:97:61:aa:d9:d6:27:c6:
68:00:df:9a:3a:cc:e9:a2:83:95:b7:38:d1:a1:d5:d7:75:a5:
ff:03:22:6d:2f:cc:08:48:ad:d2:82:58:b1:8d:c3:08:8f:ab:
83:4e:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:49 2025 by rpki-client