Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
File: 07B85890C29D11EBBAF29939C4F9AE02.roa (raw, json)
Hash identifier: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=
Subject key identifier: DE:7D:7A:3A:15:0C:E3:04:46:EC:5E:9E:4F:CE:EC:BD:53:E3:12:16
Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial: 0C34
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
Signing time: Thu 24 Oct 2024 18:56:49 +0000
ROA not before: Thu 24 Oct 2024 18:56:49 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138212
IP address blocks: 103.122.136.0/22 maxlen: 24
2403:9040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Validity
Not Before: Oct 24 18:56:49 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671a9871-ba56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:48:bc:c8:b6:e6:46:5f:45:a0:e2:f2:10:
5f:12:6f:e7:72:e3:2b:8b:c7:37:e3:1b:04:79:1a:
e8:66:ad:47:6c:c8:12:c1:17:fb:2a:cb:67:a0:7f:
d8:da:7e:5a:81:93:aa:89:2f:5a:e8:3a:65:fa:c7:
ae:84:fe:ea:f5:03:d7:14:b6:6f:ec:ea:60:5e:28:
d0:df:d0:5d:85:23:6c:27:b0:8e:af:4e:dd:25:03:
db:6a:09:45:90:fd:d8:c6:3b:9c:15:1b:c8:7a:18:
8e:eb:e1:69:e3:46:9f:19:e4:34:3c:ab:35:9e:65:
33:5d:c9:cc:2e:0a:40:0c:09:99:34:0e:9b:77:37:
b1:2b:15:93:57:02:8e:43:2b:6d:41:fc:fd:1b:01:
37:9f:ad:ea:46:db:f3:4c:9e:a3:be:dd:31:8c:ae:
31:42:7f:19:b7:e8:7e:c3:d0:f3:ff:b0:72:16:15:
88:fd:70:1d:26:7b:e3:ca:18:d7:69:71:65:41:2c:
81:df:c0:78:13:4a:a5:43:fe:cf:ac:9f:27:57:4e:
29:c3:06:0b:11:a1:40:67:78:19:e9:f2:22:1f:2b:
b9:b9:31:55:9c:6c:bf:c6:0d:db:d9:a4:d9:ae:be:
8a:7e:56:3f:30:48:4d:ae:f0:27:7f:34:40:8b:db:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:7A:3A:15:0C:E3:04:46:EC:5E:9E:4F:CE:EC:BD:53:E3:12:16
X509v3 Authority Key Identifier:
keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.136.0/22
IPv6:
2403:9040::/32
Signature Algorithm: sha256WithRSAEncryption
50:51:c1:58:b3:a0:82:3d:0b:58:78:b1:3a:77:85:0a:7a:61:
f8:44:f0:20:45:10:6a:2f:2c:f9:32:33:63:f3:dd:42:06:7f:
66:15:a0:bd:32:63:fb:f2:4b:4a:3b:e2:e4:98:f5:f5:65:1d:
f7:4b:45:2b:3b:e3:b9:53:35:b3:08:26:d3:ae:f7:cb:a6:d1:
d9:9f:7e:00:50:a7:ef:16:17:6f:37:47:b2:53:cd:e3:ef:ac:
bc:37:94:33:95:1c:33:91:bb:05:f6:5f:56:2d:00:0d:47:25:
90:a2:3c:e6:ef:24:69:57:1b:15:96:ef:b6:56:b2:6c:aa:5e:
59:49:47:02:d4:e1:f4:30:f5:3d:bf:b9:9a:7b:51:36:8b:59:
83:0c:81:ae:ae:a9:50:97:e1:ac:ca:5e:5a:1c:95:c7:76:ae:
79:79:3c:a7:a4:56:ba:78:8e:05:f7:78:62:c9:2d:be:e7:66:
08:df:5b:fc:52:01:d0:52:22:ae:3a:d6:4b:9b:f8:e3:a2:c0:
7d:39:ac:d2:19:80:e3:24:db:8c:b5:c0:d8:66:65:99:59:44:
4b:74:a8:2a:f6:b0:cc:37:cf:dc:9c:6a:dc:74:34:1e:21:08:
6a:c2:9b:21:93:60:31:f9:cc:ab:44:d9:98:0d:f2:5c:3c:ea:
3e:e6:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:20 2025 by rpki-client