Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
File: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (raw, json)
Hash identifier: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=
Subject key identifier: 2B:11:42:98:33:86:B2:E1:ED:3B:85:8D:6D:4F:9D:AF:8B:4E:61:43
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 3D
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
Signing time: Wed 07 Aug 2024 07:27:56 +0000
ROA not before: Wed 07 Aug 2024 07:27:56 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135526
IP address blocks: 103.80.69.0/24 maxlen: 24
103.221.245.0/24 maxlen: 24
2001:df2:7e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Aug 7 07:27:56 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b321fb-a6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:f2:97:85:b0:cb:42:99:be:80:3c:a9:b4:
8f:74:bb:11:5e:33:8b:df:9e:a4:f7:81:11:53:0c:
41:89:15:f4:c8:e5:29:f5:ad:49:a2:42:7c:21:a7:
2c:a8:c8:92:1c:7c:9b:69:98:ff:12:fd:5c:26:d5:
96:db:0f:bb:82:5c:d0:8a:18:83:82:92:f4:ec:b3:
ff:63:ad:fe:01:e8:44:79:44:ae:b9:74:57:75:bf:
b2:72:54:b6:15:da:9e:4e:63:df:d4:ff:7b:ff:bc:
ec:0f:ea:a8:04:62:88:50:b0:95:6d:d7:6c:5a:36:
3a:77:2b:51:d2:35:0b:b8:1e:5b:a1:44:9d:ff:21:
df:d3:23:a2:ce:d1:16:ee:df:3c:e7:9f:18:5b:98:
95:1f:f1:90:13:a8:a6:6f:31:2f:2c:e0:52:8d:72:
58:f9:5b:11:cd:78:9d:21:48:79:0e:73:04:0a:b3:
8b:08:b7:00:5d:88:e1:73:cc:06:e8:19:c3:8c:20:
3d:47:55:84:f5:27:09:4e:75:71:99:72:f7:b5:59:
6a:8f:36:d6:c2:a9:92:c0:4b:d9:96:1f:32:e5:4e:
25:6d:da:1b:4c:68:a9:de:92:95:31:bb:5a:8e:00:
11:8a:7b:59:6c:74:e9:28:cb:a8:b9:ce:ce:b0:a7:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:42:98:33:86:B2:E1:ED:3B:85:8D:6D:4F:9D:AF:8B:4E:61:43
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.69.0/24
103.221.245.0/24
IPv6:
2001:df2:7e01::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ef:b2:ef:48:08:54:59:0f:b9:95:cc:3e:65:f2:ff:6e:80:
3f:5b:c6:7a:c2:f7:1d:ab:9f:06:8f:d9:37:b0:0d:a7:63:74:
7d:f6:6e:6f:c1:73:8e:7d:46:39:81:25:3a:da:2f:dd:77:23:
5d:97:9b:0e:bd:9d:19:ba:51:33:3c:8a:3a:8d:d3:89:c3:50:
02:dd:87:28:d0:2e:a0:68:b5:64:ee:bb:98:ba:b3:32:17:13:
b0:bb:45:5c:f9:a9:77:83:21:4b:e3:05:2a:63:50:5a:b9:0d:
0d:d0:11:6c:0b:0b:bf:b8:0b:35:33:f3:20:bb:a9:2c:45:8c:
84:5c:dd:52:2a:59:b9:80:41:c9:e2:8b:c7:84:99:74:45:4f:
ca:39:90:fb:55:21:19:3b:61:05:d4:bb:17:fc:db:1e:8e:a3:
b9:81:7e:21:af:61:d4:de:d6:f5:98:55:4f:ec:84:92:98:45:
1d:7b:0c:8c:7a:7a:d8:0a:58:44:ed:aa:e7:da:a7:33:e0:11:
1f:e6:d2:02:de:57:79:93:cb:4e:b5:80:2d:19:1d:09:c0:23:
c0:43:65:07:84:05:99:6a:11:1a:f6:0a:35:f5:32:ab:05:6a:
7a:46:6e:8c:88:65:3b:e2:7d:dd:4c:81:0e:46:a5:3d:2c:37:
49:69:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:06 2025 by rpki-client