Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
File: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (raw, json)
Hash identifier: oyJ8pYc57E6anvBg+OfGz7YjmNkraWU0j/Nep9q9F5U=
Subject key identifier: 17:6D:C0:88:13:1C:D4:9C:75:6C:A2:66:56:AF:BA:FB:3C:BD:87:FC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: C6
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
Signing time: Sun 21 Jan 2024 04:56:09 +0000
ROA not before: Sun 21 Jan 2024 04:56:09 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 150445
IP address blocks: 103.76.116.0/23 maxlen: 23
2400:d360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Jan 21 04:56:09 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65aca3e8-55b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:98:98:28:3a:b9:ad:10:5d:f4:cc:88:d3:
09:32:12:ac:0a:70:d3:48:8a:e5:7c:39:24:96:6a:
37:ac:e3:cb:0c:f0:ad:29:0a:4a:53:ae:ae:42:c0:
91:54:51:19:34:23:80:47:9c:2f:86:a2:0d:1b:0e:
28:5d:de:a0:d3:9b:ca:5b:59:a2:07:46:5c:23:ff:
74:56:de:e5:91:d9:03:d8:57:0f:56:f2:c0:83:ca:
40:23:37:4f:b2:34:08:c6:ac:75:78:8e:4f:9f:dc:
ad:00:c1:5e:0b:5d:46:ed:53:f2:9d:17:e5:08:cc:
25:8c:22:87:c1:39:41:11:4a:cf:a0:13:a9:6f:0f:
6e:82:8c:73:c1:52:81:f2:d9:99:eb:03:f6:98:ec:
6b:6c:0e:f9:0a:dd:0b:dd:d7:b1:6a:13:37:f4:2e:
d0:26:0d:e2:60:ea:aa:80:ee:7d:43:03:89:90:3c:
c9:ef:77:b8:9e:3a:a6:4e:23:b9:14:b6:44:b6:f7:
f6:2e:9c:a0:74:de:5d:b2:68:6b:e1:d7:62:90:ad:
e1:0e:63:45:cf:78:7e:de:30:23:2d:2c:80:4e:1c:
48:c8:57:c0:49:33:9c:80:6e:1e:d9:b2:e9:78:64:
29:ba:cb:87:c7:a1:0e:84:61:27:7e:a8:da:7e:ce:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:C0:88:13:1C:D4:9C:75:6C:A2:66:56:AF:BA:FB:3C:BD:87:FC
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/1ED3BAF898A011ED9D31B05CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.116.0/23
IPv6:
2400:d360::/32
Signature Algorithm: sha256WithRSAEncryption
b1:1a:db:af:ce:03:94:98:f0:a1:07:14:99:12:1b:23:cb:d3:
f9:97:53:28:ad:4c:1d:3e:7a:0a:11:42:82:56:3e:e0:24:5d:
9f:d9:11:5b:1c:8c:19:1c:7d:5b:d7:03:4e:6e:e0:f3:b8:ca:
e9:13:99:56:9d:7c:ba:98:e7:54:ab:f3:58:e7:7d:50:28:fb:
bd:8b:e0:70:fc:3b:79:03:68:89:ee:38:7f:c3:9b:56:fc:58:
57:98:0e:0f:e4:43:74:03:40:ba:87:a6:6e:97:12:a3:53:6a:
3b:5d:ef:19:49:d3:af:08:b8:81:7e:86:09:84:0b:2d:9c:a6:
62:f4:cc:07:6d:dd:25:a2:2c:a4:92:b8:67:6a:bf:be:20:e3:
1b:ab:c2:9f:6b:0c:86:f9:16:b8:5f:cd:7e:11:c3:39:92:78:
ad:f8:68:97:3f:3d:b7:80:75:a9:05:97:6b:9e:b6:3c:98:89:
0c:12:30:2d:d8:42:04:cd:e2:40:08:8f:b6:6a:1e:94:60:68:
98:2f:72:7b:97:b4:2d:52:0d:b6:36:78:56:d3:e3:78:dc:0d:
d4:b8:49:08:09:ae:da:6e:7a:c0:40:a5:dc:35:9b:16:3e:58:
0a:ee:95:58:b2:27:ca:e6:53:16:2f:0a:a4:f1:44:fc:27:8f:
61:7f:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:23:01 2025 by rpki-client