Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/6FBFD196C3B811EF82B40031C4F9AE02.roa
File: 6FBFD196C3B811EF82B40031C4F9AE02.roa (raw, json)
Hash identifier: 8pN9UTSbptAJjL+U1Se3cf6KUhvsNW9+Qz8zuxsCBmY=
Subject key identifier: B7:57:45:88:5A:2E:2E:C5:46:E8:5B:59:51:BD:E9:9E:61:1F:5D:B6
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 0694
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/6FBFD196C3B811EF82B40031C4F9AE02.roa
Signing time: Thu 26 Dec 2024 18:37:19 +0000
ROA not before: Thu 26 Dec 2024 18:37:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 137967
IP address blocks: 103.161.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Dec 26 18:37:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=676da25f-e8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:05:d3:a1:55:45:fe:be:6f:c7:24:b3:ca:
5b:17:e9:80:f4:06:8e:4e:d4:f2:c0:23:6e:44:97:
78:a9:af:49:f7:0a:94:21:aa:d8:a1:6e:51:f5:be:
61:e5:b8:58:d1:79:e1:6c:0b:38:db:f4:5d:2e:23:
e5:fd:8e:06:66:e6:33:d8:8e:f1:dd:94:da:36:e4:
f3:b5:3b:7e:ec:66:df:d3:c8:9b:e4:ae:08:ca:11:
a5:62:9a:01:4f:b8:d9:c8:7f:b7:5b:ea:45:b0:39:
2a:7c:d4:68:e9:0a:c8:78:2b:8c:47:c7:73:b0:12:
d4:93:48:2d:17:88:d3:09:d4:ed:e0:16:49:82:f8:
0a:62:b6:1e:f7:68:3a:1a:08:3d:79:17:47:74:77:
8f:08:97:54:49:53:cf:37:18:1b:50:75:ea:72:06:
43:77:92:5f:83:dc:9f:66:46:fa:15:93:b9:76:1e:
02:a1:7b:70:88:53:58:92:91:ff:37:7f:c3:f6:78:
43:63:33:be:63:de:a0:2b:81:c2:69:3b:2a:4f:47:
c3:43:e6:29:43:97:a3:b0:e2:32:35:e7:95:3e:ca:
73:6c:58:20:c7:7a:75:fe:38:4d:75:f1:86:77:8b:
1e:40:86:18:21:c7:77:65:bd:bf:a5:7f:cd:08:36:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:57:45:88:5A:2E:2E:C5:46:E8:5B:59:51:BD:E9:9E:61:1F:5D:B6
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/6FBFD196C3B811EF82B40031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.151.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f2:4c:b7:ac:59:3e:04:84:dd:bf:42:7c:6d:7d:d9:ae:92:
d3:a3:29:5e:66:fd:96:12:29:a5:49:df:a1:90:2f:d5:e0:89:
35:d4:94:7b:86:07:85:96:25:e3:13:47:35:dc:58:b1:c0:5c:
62:6f:0f:b4:94:11:f3:b2:d4:80:e6:a8:6a:d8:a5:91:7f:55:
8b:ee:61:59:fc:f6:87:0b:52:90:3f:bd:3e:c8:a2:69:25:a0:
50:28:57:1d:fc:74:45:37:eb:b6:bf:d8:1b:43:4f:ed:54:b6:
92:80:cc:f0:14:16:78:ec:cb:af:53:92:28:a3:a2:30:94:b1:
ad:91:80:0a:5d:e2:c9:2a:4b:68:7c:b3:93:6c:0a:7c:c0:2b:
d8:24:bf:00:32:2c:ea:65:05:5e:ca:8c:9a:1e:56:9a:c8:46:
f7:53:ce:f1:8b:5e:dc:04:56:4f:95:e8:77:fa:18:28:bd:d8:
b6:80:be:b4:dd:f9:e6:a9:29:81:67:10:85:9d:21:82:93:d7:
ea:91:c8:d0:16:a6:90:c9:73:2a:69:b3:ed:81:bd:da:bf:ec:
84:3c:17:66:7b:69:65:f3:23:e7:9a:7a:21:ef:a3:9a:89:05:
36:61:5b:cc:14:e4:ff:ff:45:ec:6e:4d:fd:9f:c1:76:a8:1b:
40:50:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:35 2025 by rpki-client