Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
File: 165D22AA7A9C11EDAB620123C4F9AE02.roa (raw, json)
Hash identifier: ltn5Ga/HVGlPtg0FZ2bC2TiP0qFyVOfp55rZ+eNyYGQ=
Subject key identifier: BB:5B:34:CC:49:94:AE:30:6E:78:8C:4D:AB:92:27:AA:DE:DE:B8:7E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 458E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:33:07 +0000
ROA not before: Thu 05 Sep 2024 03:33:07 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140748
IP address blocks: 103.154.180.0/23 maxlen: 23
2001:df4:9480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17806 (0x458e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:33:07 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92673-43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:5d:09:28:e2:cf:b1:0a:4a:e2:ca:4c:9b:
1c:a7:51:c9:a3:ef:55:d7:2b:5b:02:9d:16:e3:59:
d0:43:5f:19:e7:b3:e3:4b:86:2d:d3:58:53:7e:e8:
23:8a:cc:04:aa:8f:dd:0b:ee:10:b5:cf:a0:39:42:
78:65:07:54:c7:f2:6c:76:92:a5:07:48:95:d1:c4:
eb:80:65:2e:c8:ae:d1:ed:a5:43:99:39:b5:e7:95:
10:f3:b8:84:f5:3e:cd:57:72:e4:aa:50:84:d1:b5:
ba:2b:b7:a3:fb:40:4c:72:68:84:a1:0c:98:88:01:
97:93:0a:aa:2c:12:6a:c3:c4:63:f3:c9:50:18:bf:
e7:eb:f7:89:1c:b8:16:4f:53:2b:a4:a0:34:64:88:
18:8a:65:26:56:79:41:4f:8b:37:78:9c:10:da:02:
c1:1b:28:f1:96:92:24:58:73:3f:5d:bb:69:70:68:
a0:73:33:c9:42:d4:88:2c:ff:92:fd:7d:3a:8a:21:
41:88:8c:f3:d6:27:50:7f:78:ec:c2:b2:a2:c4:64:
32:87:5d:73:ee:e0:60:20:45:02:69:79:1a:a3:6a:
ea:a8:23:f9:c5:52:d3:9f:cc:01:87:0b:7b:e1:9b:
2e:dd:25:5f:31:6b:57:20:a9:f3:2f:a7:14:cf:73:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:34:CC:49:94:AE:30:6E:78:8C:4D:AB:92:27:AA:DE:DE:B8:7E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/165D22AA7A9C11EDAB620123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.180.0/23
IPv6:
2001:df4:9480::/48
Signature Algorithm: sha256WithRSAEncryption
33:2e:d3:f5:23:e8:76:25:b5:28:18:4c:e4:b2:a3:1e:fc:c4:
45:5e:07:2c:86:b8:d9:fd:0f:5d:f1:92:04:fb:f1:ea:dc:8d:
b4:ce:bd:15:da:4b:49:50:4a:f2:41:12:34:94:ed:bb:eb:d3:
51:dd:71:10:bb:4b:ea:d5:ac:02:07:c4:a3:df:d4:c2:cc:b3:
c2:6a:57:bb:bb:ce:a6:0d:e6:44:d4:bc:7c:af:c0:11:6f:92:
34:9f:e9:75:88:af:df:97:44:4c:df:0c:bb:57:cb:64:2d:bf:
94:d4:48:fe:90:c0:d9:90:10:a1:a1:13:76:0d:49:22:fa:d7:
6e:b8:71:9d:77:1b:82:4b:1f:54:28:e7:f1:b9:c7:9f:d0:8f:
68:5e:ca:08:fe:4f:33:48:6b:8f:92:2c:78:f9:9a:84:b0:f1:
c3:7a:27:c1:70:b4:4e:04:a0:0e:f8:26:2d:bd:68:50:24:1e:
b6:75:b0:f3:c0:1e:10:bf:d0:2e:6c:be:16:e1:35:9e:9d:38:
87:29:9e:ce:93:ff:1c:29:3f:76:45:5d:61:23:58:84:df:23:
0c:66:a7:11:a6:ff:bc:bb:ed:da:74:e5:0d:18:57:6d:c7:6e:
f2:88:14:4e:4b:f2:ce:e0:87:da:82:9f:07:13:d4:e6:77:7d:
ae:da:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:27 2025 by rpki-client