Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
File: 79C02FB0CC8511EC8D238672C4F9AE02.roa (raw, json)
Hash identifier: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=
Subject key identifier: 7F:2A:A6:5B:51:29:23:61:0D:2A:3B:F1:18:C8:EF:5A:49:55:FD:6C
Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial: 08EE
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
Signing time: Thu 10 Oct 2024 20:59:03 +0000
ROA not before: Thu 10 Oct 2024 20:59:03 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 136950
IP address blocks: 103.100.60.0/22 maxlen: 22
103.100.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Validity
Not Before: Oct 10 20:59:03 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67084017-05e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:ee:91:6c:fe:c6:08:4a:8d:b9:cd:dd:68:
58:e9:78:aa:61:e2:a1:61:fe:d7:e3:59:ee:95:fb:
99:af:79:fe:f1:e5:8d:fc:db:e5:ca:2c:e6:94:fe:
6c:fe:5c:a7:d1:03:6f:74:5f:5c:30:b2:c8:60:52:
f5:e1:d7:a8:7c:6f:dd:0f:a6:b9:30:08:54:39:23:
f5:a5:74:58:27:b8:5a:e8:c3:fd:97:19:12:62:3e:
b9:b3:ce:ee:cb:d6:ec:cd:a8:79:7e:e9:59:d7:c4:
b8:6b:31:93:71:da:fb:26:40:d1:fe:dd:e3:dc:7b:
b5:03:89:88:22:b4:c5:b9:f3:11:53:98:1b:92:fe:
52:a7:cb:78:7b:cf:bf:e6:a2:ca:29:3d:aa:34:4f:
a3:ad:c5:b6:ab:60:2b:5b:fb:88:fa:12:b9:1d:3f:
76:b6:b0:48:5d:b8:47:64:99:30:23:a8:bd:b8:06:
f0:ee:7f:2f:c0:db:33:1b:52:76:d2:23:10:37:52:
48:12:5a:86:7f:ec:cb:74:76:31:ec:d8:40:43:e8:
70:16:59:4d:1e:06:56:c8:fc:8e:d9:c2:cc:d2:db:
c2:49:0f:56:0a:bb:a5:2e:33:b5:d0:08:20:42:71:
01:79:7f:29:e5:6b:ff:76:e5:32:d2:c2:25:df:e2:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:A6:5B:51:29:23:61:0D:2A:3B:F1:18:C8:EF:5A:49:55:FD:6C
X509v3 Authority Key Identifier:
keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/79C02FB0CC8511EC8D238672C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:01:ca:48:06:18:b8:ea:44:fc:99:9d:6c:99:3f:e2:b5:e6:
e6:f1:eb:90:ad:e1:bf:64:7c:a6:91:69:1e:5a:b6:b8:fb:9d:
0a:8d:8d:2a:a0:bc:4a:a4:b4:36:99:10:51:db:5d:32:19:62:
9b:cf:8f:a9:9a:ed:69:8e:a6:1d:7a:9e:ac:a0:3f:27:18:73:
81:b5:e3:ad:9d:8f:a8:20:a8:55:95:bd:5f:4e:37:2a:f4:77:
80:15:70:ab:c6:f5:c6:d2:15:0d:31:91:1d:32:d5:e1:a1:49:
4d:a7:c0:4e:4a:cb:3e:ba:53:3c:72:cd:af:08:20:14:5e:0a:
1e:11:e0:5b:d1:9d:56:a3:54:b2:2c:51:ca:67:bf:72:1a:7c:
58:eb:d4:4e:72:af:46:14:91:ba:14:25:a9:50:a6:6a:15:72:
f7:8c:9f:0d:1c:17:c7:41:2c:ef:f5:9b:53:36:5f:01:69:c1:
e9:70:57:90:18:70:d0:dc:81:ee:7c:5b:07:23:f6:eb:3e:bd:
b1:be:6b:6b:3d:08:c7:f8:0c:b7:0f:63:15:04:56:b2:df:f0:
c1:a3:9c:81:b0:42:d3:cd:b3:1e:d6:e9:25:e9:ad:75:88:c2:
49:16:6b:07:36:13:37:8a:bb:f2:ef:ff:b4:14:47:6a:c1:24:
b8:33:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:22 2025 by rpki-client