Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa
File: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (raw, json)
Hash identifier: l/rvxQeqO+VdRHgLRLz7RrPQYKHzDkdt1MLwmoA9TZg=
Subject key identifier: A3:0A:E1:C3:46:43:2B:06:A5:CD:DE:5F:DC:B8:62:EE:38:C0:24:94
Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial: 04DB
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa
Signing time: Thu 27 Jun 2024 01:00:10 +0000
ROA not before: Thu 27 Jun 2024 01:00:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136573
IP address blocks: 103.92.204.0/22 maxlen: 22
103.92.204.0/23 maxlen: 23
103.92.204.0/24 maxlen: 24
103.92.205.0/24 maxlen: 24
103.92.206.0/23 maxlen: 23
103.92.206.0/24 maxlen: 24
103.92.207.0/24 maxlen: 24
2401:20c0::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Validity
Not Before: Jun 27 01:00:10 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667cb99a-bb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:d7:50:33:d7:51:3f:4c:4d:6d:3a:1a:21:
20:09:95:7d:2a:40:0c:bd:f7:8d:fa:98:ee:ae:55:
92:c9:ca:d8:e0:dc:92:5b:e5:02:ae:0e:c9:29:3e:
b4:11:71:92:2f:66:3a:0c:51:cf:3f:a6:81:70:6e:
14:02:c2:20:7c:1f:74:f4:0e:58:dc:41:23:f6:39:
e4:28:8a:b3:93:9c:90:ec:bc:ec:c4:e4:2f:f0:d5:
3d:35:ea:d9:f4:ff:64:5e:95:ca:87:51:80:d8:fd:
25:f3:e8:df:9e:53:6c:3a:fc:e6:09:61:10:b7:d0:
99:0c:cc:a4:be:f9:47:b5:11:9e:a7:43:82:39:fa:
37:e7:86:6a:7f:1f:35:45:c8:73:0e:81:9d:f3:bd:
f1:ff:fe:39:6e:11:df:14:51:dc:b0:02:6a:2e:01:
5c:10:91:9a:0c:dc:f8:8a:de:f1:f4:6a:dc:e6:a7:
21:89:20:0e:ca:cc:df:a7:ea:19:ba:04:fb:a8:f0:
83:e0:bf:df:c9:11:ae:66:6b:75:77:33:7d:85:be:
6a:f1:6f:48:e0:77:fc:2a:a1:8c:5a:db:cf:c7:b5:
a4:53:b6:18:64:35:e1:d4:71:45:14:e0:f2:80:b8:
ab:07:b3:7d:91:2e:5f:f8:2f:f6:1b:56:13:a2:9b:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:E1:C3:46:43:2B:06:A5:CD:DE:5F:DC:B8:62:EE:38:C0:24:94
X509v3 Authority Key Identifier:
keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.204.0/22
IPv6:
2401:20c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:2e:45:ea:55:bd:d0:8f:9f:1e:ff:d2:91:62:cb:67:bb:ea:
50:86:73:d5:7d:2e:b2:4d:b0:3c:57:e0:65:05:4c:15:14:c4:
cb:43:9b:5d:b8:74:d4:15:be:6e:c9:51:6f:eb:16:ab:dd:a8:
14:89:01:11:38:ed:de:77:80:5d:e2:db:a3:58:f5:36:fe:74:
96:a5:a6:82:97:6b:47:c9:ab:ec:00:b9:56:31:c0:d7:af:a3:
d5:cf:1c:9b:a5:07:0a:6d:1d:c3:c6:ad:95:ec:b2:23:cf:02:
3a:e8:4a:c8:bb:43:20:2d:04:29:fe:0e:37:74:19:56:4d:62:
74:ae:75:58:c3:ae:18:3a:13:0c:7c:1a:65:75:e2:3f:c5:a2:
4b:04:46:57:d3:e6:5e:97:8c:92:55:3d:72:12:2c:79:ab:ab:
fb:e2:f7:d3:f3:4f:58:1c:75:4d:88:3e:33:ac:b6:c4:8b:32:
f0:28:71:44:df:fe:0d:25:a0:a8:ca:42:06:ee:36:c7:4b:99:
b4:72:15:d9:d9:43:79:c5:c1:41:64:bf:ed:d7:29:9f:c9:1c:
df:18:a9:b6:41:b3:70:3d:c3:32:35:ab:c9:d1:61:a7:26:9c:
54:cc:11:f4:bc:5e:ff:28:e8:c5:96:a5:5e:db:23:a6:26:f8:
97:00:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:53:08 2025 by rpki-client