Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
File: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (raw, json)
Hash identifier: rIojZvN+6LuwrQImXREvas11U+DY0c75UvVMYniRtPk=
Subject key identifier: 64:4D:39:A5:D5:64:97:59:23:63:25:65:D8:E5:ED:2D:3F:8E:15:6E
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: C0
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
Signing time: Tue 05 Mar 2024 05:47:55 +0000
ROA not before: Tue 05 Mar 2024 05:47:55 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 150723
IP address blocks: 103.99.35.0/24 maxlen: 24
2001:df1:e7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Mar 5 05:47:55 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e6b20b-5fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:65:38:fd:24:28:0b:48:b5:1b:e8:4b:6f:
f5:e4:e3:1c:b6:98:fc:6c:3b:3e:b6:ad:ac:65:a2:
6a:3f:2c:48:b8:c0:cb:15:a6:18:7a:c5:90:0f:04:
67:9d:8f:2c:8a:f1:18:63:ca:8a:6c:2c:6e:c4:76:
b3:49:20:4c:a3:fd:fd:1b:a1:c1:40:cf:03:23:be:
a0:6f:6a:f7:0e:0d:eb:ff:25:b5:54:47:a3:aa:b0:
7c:23:3c:7f:b5:2d:c6:3d:eb:65:ee:a2:a2:5f:37:
f6:98:56:a5:0a:3a:98:1e:b8:8b:83:32:22:09:af:
08:e6:49:65:8e:81:31:f7:5a:e3:f7:5f:38:ff:2a:
64:4b:72:63:70:e0:f0:50:bb:59:85:da:32:a8:8c:
23:d1:90:7a:c1:40:7b:b0:f0:bf:26:b4:01:e2:32:
52:d2:73:5c:cd:6a:b4:42:ba:a8:2d:98:bd:f2:dd:
37:3b:da:2f:20:d6:17:32:c5:21:96:0f:ea:10:49:
1e:89:94:39:c9:e0:07:cd:55:e0:b3:df:cd:be:9f:
06:c6:7f:d8:84:c3:60:2b:6a:c4:92:b1:ba:e1:20:
41:59:ea:19:ce:79:5b:a9:ff:4b:d8:dc:a1:20:8d:
88:70:18:72:6a:56:93:a4:96:00:b3:6e:90:27:71:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:39:A5:D5:64:97:59:23:63:25:65:D8:E5:ED:2D:3F:8E:15:6E
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/99B10EC4BD3511ED837DED0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.35.0/24
IPv6:
2001:df1:e7c0::/48
Signature Algorithm: sha256WithRSAEncryption
4a:af:40:c1:42:3c:51:97:4a:88:52:77:0e:0e:ff:8e:1b:58:
e3:fb:c4:53:a2:4c:ea:b4:3d:26:0f:26:2e:15:be:c5:db:1a:
54:06:c6:eb:0f:7c:d8:c2:0e:d5:fc:8c:cd:aa:db:36:eb:91:
d5:82:94:39:cb:1f:62:8f:17:2d:38:e8:9d:ad:db:44:83:ce:
5d:65:09:b2:88:ef:f3:62:62:1f:99:51:5f:b0:a9:8e:92:a3:
fd:6c:41:7c:dd:94:c6:4a:a4:c3:8e:09:55:0e:2d:69:8e:d7:
57:18:2d:d1:9a:18:04:e3:4e:e9:0a:16:30:f2:06:48:cd:40:
5b:75:9a:f2:14:9a:6e:ce:af:28:f3:eb:34:84:fa:51:d2:83:
05:24:a8:8f:10:d5:62:9d:ab:c1:da:10:ec:67:ca:f1:52:2d:
10:e0:d1:92:c8:09:af:ab:1b:96:9e:ed:5b:d9:d2:7f:35:4b:
26:c9:c4:03:4b:ac:ae:9f:3e:73:53:5e:0a:37:7d:64:84:b2:
09:53:ff:5b:08:68:3e:88:7b:52:b4:53:09:d8:84:b3:f2:ae:
3a:92:2d:84:b8:ec:2e:ab:57:aa:05:43:22:b4:f8:81:fc:a0:
09:a9:e0:de:67:30:af:30:81:6b:57:05:96:b8:ff:b6:11:34:
ae:e4:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:24 2025 by rpki-client