Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
File: 994A883AE06511EEA8CEC61EC4F9AE02.roa (raw, json)
Hash identifier: LjsOflVWx2ASLq3Z//t4WARlGyPly5HO69O4zsWdHy0=
Subject key identifier: 27:46:01:A7:47:4A:02:85:74:B3:AA:AE:6D:95:B1:85:00:E1:BD:B7
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 58
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
Signing time: Tue 27 Aug 2024 06:51:09 +0000
ROA not before: Tue 27 Aug 2024 06:51:09 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55501
IP address blocks: 103.155.4.0/23 maxlen: 23
103.155.4.0/24 maxlen: 24
103.155.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Aug 27 06:51:09 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66cd775d-3d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:13:21:b4:d8:b7:de:6d:0c:bd:32:ab:62:
c1:6c:be:0f:a6:80:70:eb:95:95:90:98:a7:d6:81:
09:ac:cc:50:2a:d9:e3:bb:0c:9f:e1:d8:6b:80:a9:
82:d0:4c:11:38:1a:4c:ca:02:d3:db:d7:52:72:26:
c2:8c:69:09:6e:9a:78:25:14:b7:15:f1:30:3a:9a:
f3:01:fd:53:42:5a:7b:4f:60:a9:7c:2b:93:7b:81:
4e:db:10:53:f7:bd:0b:ef:9c:46:b0:f4:28:d9:f5:
19:8d:9e:2d:4a:21:4b:f9:ec:28:8a:ca:e4:16:3e:
34:9f:64:c7:de:e4:1f:50:97:5c:56:c2:99:3f:db:
8e:58:07:bf:9f:69:7f:e2:ec:a5:0b:fb:b9:56:66:
4f:69:88:83:32:d5:98:c7:96:41:e2:5b:5c:0e:54:
f5:3c:9e:91:c1:b8:5f:c5:85:88:e6:0a:72:db:51:
9c:97:be:68:d9:b4:1b:82:1a:f3:45:90:19:e7:c7:
8d:5d:a9:65:e2:79:2f:fb:3b:f6:d8:e3:0a:d4:7c:
75:59:12:90:f2:38:a7:c1:df:ee:b2:67:54:5d:78:
6f:b4:df:d0:36:ad:41:91:ab:47:4f:cb:9d:5e:9e:
39:e1:80:82:87:f1:4b:53:dd:fe:62:c3:6d:06:78:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:01:A7:47:4A:02:85:74:B3:AA:AE:6D:95:B1:85:00:E1:BD:B7
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.4.0/23
Signature Algorithm: sha256WithRSAEncryption
99:79:12:ae:f2:bb:ad:72:5d:06:00:d7:c2:b7:e5:2f:24:04:
9a:bd:ef:b1:16:fa:1e:cc:91:ba:07:ef:fb:b5:d2:4c:7b:4c:
92:a1:4b:ea:67:90:bb:c0:05:65:38:9f:cf:40:52:73:81:a3:
63:c9:17:ea:35:cd:52:e4:04:90:15:72:94:67:b5:36:49:13:
d7:ec:14:b4:b7:e2:e9:59:91:0f:1f:0e:90:af:1e:38:b5:de:
5e:0c:0e:ad:e6:a6:87:cd:ab:bf:4a:0b:ef:d2:28:bf:df:bf:
6c:6b:38:41:22:30:b0:8c:e6:ba:33:fa:e6:21:2f:7d:7c:d3:
11:74:ae:ef:97:da:a7:56:40:96:5e:bf:55:8b:51:61:5e:be:
19:c2:32:ab:d0:3e:54:6b:af:c7:aa:24:32:48:70:84:56:63:
c3:4e:a3:4b:db:d3:70:49:d7:14:5e:a2:19:4c:75:94:e5:62:
34:cb:dc:2c:4e:f0:f1:91:8e:70:19:12:20:e4:38:2b:d8:fc:
f8:49:8c:2d:28:a2:e5:a8:25:7b:55:65:9d:7c:4f:f3:86:cb:
34:73:7f:ed:a0:71:5f:82:aa:1d:50:f3:a9:49:c6:02:b2:c5:
0e:4e:a7:d6:8a:71:17:27:11:c6:7b:f9:39:e0:4a:c4:da:00:
dc:db:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:26 2025 by rpki-client