Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
File: F6EEC31C996711EC9741246AC4F9AE02.roa (raw, json)
Hash identifier: NNtBxbiOMSu76rIcGLQ+/ugCEom0FursPoASdHCWF7U=
Subject key identifier: 37:04:59:13:8B:1B:2B:C7:7D:D0:F0:97:33:2E:D3:74:5F:A9:AD:DD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4540
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:31:57 +0000
ROA not before: Thu 05 Sep 2024 03:31:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131390
IP address blocks: 103.242.52.0/22 maxlen: 24
2001:df2:4dc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17728 (0x4540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:31:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9262d-41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:cd:69:10:6c:52:c5:25:e3:03:32:37:b3:
b8:39:56:db:a2:eb:d3:93:09:d8:66:bf:cc:98:c9:
6b:7d:25:0c:b0:44:f6:72:21:3e:28:5d:cb:d9:3e:
ab:2b:39:23:0e:38:4e:13:06:fe:8a:86:08:c8:6c:
cc:c6:13:ca:63:4c:b8:43:3b:d1:1b:02:2b:b1:b7:
33:60:d5:9f:5f:15:99:6a:b4:de:66:92:7b:3d:bb:
7d:d2:94:a6:f2:46:c6:32:7a:09:07:5a:04:3d:94:
c6:30:8c:18:aa:14:25:78:20:4d:ab:cd:91:0b:9f:
2b:a4:38:9b:44:6c:cf:5a:06:ca:b7:61:15:a7:1b:
0b:08:68:e1:ce:60:23:db:e3:24:ab:6e:82:b5:ba:
31:83:cb:02:85:e6:a0:24:85:98:7b:ab:f3:7d:d0:
fb:82:ac:f5:8a:5b:ab:6c:e1:9e:46:0a:98:ee:0a:
77:7a:2d:22:52:78:39:b4:50:cd:68:0a:86:57:4f:
b2:92:47:83:2e:5f:d3:bb:73:7b:32:ec:51:ca:d7:
33:36:5a:a4:bb:b3:5b:8f:dd:9e:ec:72:4a:76:21:
21:64:cd:7f:ad:cf:86:5d:49:fd:c9:1d:34:d9:1d:
87:5a:f5:36:9f:cc:1e:ea:84:a1:15:86:64:dc:f0:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:59:13:8B:1B:2B:C7:7D:D0:F0:97:33:2E:D3:74:5F:A9:AD:DD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.52.0/22
IPv6:
2001:df2:4dc0::/48
Signature Algorithm: sha256WithRSAEncryption
87:61:d7:35:16:d1:0e:f3:55:85:17:d3:c9:51:1f:f7:5f:f9:
16:be:f4:ed:93:97:92:52:b7:c6:64:09:bc:df:98:9e:00:e6:
54:5c:c9:bf:63:49:ec:af:80:b9:7d:83:8c:e2:76:bc:55:0f:
13:7d:f8:d5:90:ed:6a:5d:c9:00:f6:7f:32:67:16:ee:c0:69:
2c:c4:2b:a9:12:5d:f1:59:cf:8c:87:a1:20:30:58:04:e9:d9:
ef:ec:3a:8e:1c:ce:ae:01:1f:74:a1:34:e9:8b:b0:9a:9a:79:
62:23:3e:81:8c:c4:7f:63:78:19:61:ff:72:1d:33:bc:e3:18:
85:ff:c4:d4:0e:9d:ea:f1:04:92:69:e2:f3:8b:c2:8d:db:1f:
aa:39:9b:b7:23:dd:f9:13:76:07:09:dc:81:9c:04:9f:1e:0c:
b5:ac:08:f4:4b:35:db:93:21:90:85:47:a9:71:1d:c2:9c:43:
f5:98:ae:3f:d3:3e:8e:12:a4:3d:ec:ff:60:91:9b:da:85:e8:
b4:bc:5e:db:41:80:4c:5e:d2:03:5b:a9:89:15:52:48:f4:07:
0f:d0:4c:38:40:df:ab:b8:b8:6b:21:a3:44:aa:bc:77:e7:94:
c1:0c:fe:0d:da:ab:b3:1b:c2:63:24:17:fb:7f:a6:a0:97:b7:
eb:85:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:10 2025 by rpki-client