Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
File: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (raw, json)
Hash identifier: CdejYox3BV6EKy7rSMjwH4v5mRzFb0N6duLMtMnZvdQ=
Subject key identifier: BD:DD:BC:01:B1:B3:E2:37:7D:F2:FB:49:52:28:EC:A2:73:24:7A:99
Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial: 04FC
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
Signing time: Fri 31 May 2024 01:47:10 +0000
ROA not before: Fri 31 May 2024 01:47:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135378
IP address blocks: 103.167.120.0/23 maxlen: 23
103.167.120.0/24 maxlen: 24
103.167.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Validity
Not Before: May 31 01:47:10 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66592c1e-e41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:89:ee:72:c7:51:bf:66:8b:89:d8:19:21:
ab:c8:22:1e:e1:46:dc:9a:32:22:10:37:4e:3e:d2:
ab:78:a0:4d:d5:ed:a2:78:75:a6:37:45:23:e1:ba:
a0:96:49:00:88:c1:04:fa:5f:c1:b8:e5:8b:02:dd:
8e:82:dc:69:67:b1:c1:39:d3:14:2f:eb:6b:32:b1:
91:4d:02:0a:af:d5:9e:9d:6a:53:3f:b6:48:ab:31:
d8:4a:cd:df:e8:51:8b:f4:69:9c:51:4f:f2:d6:38:
5f:12:b2:0c:c3:b8:b3:fd:26:81:f2:06:b0:0a:fa:
fa:56:f9:fe:f6:75:3a:ca:55:69:51:46:30:b5:8c:
a1:81:99:79:68:97:d1:94:b6:69:00:b1:62:45:46:
f0:59:b6:1b:77:16:62:20:b2:31:07:30:ab:fd:3f:
09:71:99:9c:3c:c9:af:2a:5e:99:81:e8:ea:cc:0e:
fd:68:3b:c3:28:da:e2:ca:8e:dc:0b:43:60:8c:f8:
d6:5d:17:21:02:1c:1f:10:9a:fe:9d:fa:c1:63:02:
b0:36:db:a0:a2:39:57:b4:a7:9e:18:c2:80:47:c9:
49:fa:57:84:fe:66:8d:8c:e7:cb:4f:be:d6:58:8b:
02:d2:f0:73:8f:4a:d6:7c:8e:b3:4d:c4:56:3f:ec:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:BC:01:B1:B3:E2:37:7D:F2:FB:49:52:28:EC:A2:73:24:7A:99
X509v3 Authority Key Identifier:
keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:66:7c:d2:e7:72:75:71:f7:79:6c:0c:de:db:02:45:f2:5c:
a9:81:8f:9b:9f:ae:a4:1c:51:d6:4b:21:c7:80:34:ae:4d:b0:
05:c6:ca:f2:e1:d7:19:8c:7a:6a:3c:e1:dc:ec:ed:a9:55:20:
9e:4c:95:87:4a:f4:c4:63:ae:c7:6d:cd:fb:cb:02:5c:c8:52:
c6:13:db:d5:2c:bb:cc:0a:ac:32:7e:ea:7c:b1:2a:c2:f7:72:
ce:8a:f3:60:9e:12:a4:f2:4f:44:17:e8:be:5b:88:49:46:e1:
53:13:3d:f0:29:7c:a7:d2:a4:61:79:5a:65:6e:da:0b:64:b1:
ff:ee:4d:29:c0:e3:a3:5a:de:94:89:e8:2c:46:36:6c:a0:57:
9b:38:35:a4:0f:9f:e2:44:e0:97:53:0f:7f:19:4b:7d:0d:53:
d8:e6:fb:38:93:cf:79:1b:dc:8e:09:ea:cd:78:e4:25:e4:62:
3f:94:98:86:5f:73:6e:cd:f7:bb:b7:fe:48:29:16:49:58:fb:
07:04:d4:19:d7:f3:1d:45:e6:42:e5:ec:0f:10:a9:d1:bd:7b:
c0:40:a7:83:9d:dc:e7:d5:94:d5:9a:ee:d9:7d:0b:b2:ed:fd:
6f:67:f1:d9:20:62:ca:b5:c3:ff:26:e8:43:f4:3f:42:8a:09:
1b:89:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:24 2025 by rpki-client