Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
File: BB701D0A8C5211EF8F13723AC4F9AE02.roa (raw, json)
Hash identifier: xQtZ27HCMJDhRu2GTHStInAtAmFTEPOOnXaNIlpTnQQ=
Subject key identifier: C2:E6:9E:F4:F3:C3:3E:26:F6:24:DB:18:24:40:CB:49:20:61:4B:8B
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 09
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
Signing time: Thu 17 Oct 2024 06:40:43 +0000
ROA not before: Thu 17 Oct 2024 06:40:43 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140227
IP address blocks: 103.110.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Oct 17 06:40:43 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6710b16b-a969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:ba:bb:3e:41:33:a4:3e:ab:5f:71:72:c1:
6c:7b:1b:3a:7e:37:af:19:45:66:61:5a:24:01:f2:
18:bd:7d:61:4c:f2:9e:59:89:c8:91:30:a0:d5:5c:
43:f8:e9:fe:c5:85:78:7b:0e:86:d7:1b:6d:e3:1b:
e0:93:51:87:c7:bc:b4:37:3c:da:bd:ab:b6:3e:0f:
7c:1d:e0:e9:89:8f:0a:46:45:5a:6b:53:ff:25:02:
f1:43:99:c2:47:44:38:ca:64:d7:7b:8e:76:f9:5f:
30:d0:60:12:c5:06:88:46:b9:46:d7:3e:16:dc:94:
14:81:2e:60:73:3f:c6:f1:b5:47:ae:1f:2f:af:0e:
6b:c4:80:0a:cf:a1:ea:27:dc:0a:e4:c0:b2:c1:60:
19:d1:47:a7:49:f5:ba:50:92:a9:5d:50:b0:06:89:
e4:a3:39:b6:12:83:07:bc:35:9b:91:dc:4e:88:db:
23:30:b8:6f:99:dc:b9:15:39:38:5a:20:35:27:e0:
1a:e5:25:80:14:77:4d:d1:f6:77:1d:1b:f2:3b:c2:
76:cd:2a:9a:db:88:b8:e5:ac:f5:ff:4d:db:f1:1a:
bb:68:35:af:62:23:46:e1:47:9a:ee:7c:c3:f2:9a:
ff:b9:1c:ff:06:56:41:5a:f2:a4:1d:ca:7e:9d:0c:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E6:9E:F4:F3:C3:3E:26:F6:24:DB:18:24:40:CB:49:20:61:4B:8B
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/BB701D0A8C5211EF8F13723AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:30:06:67:d8:bf:bf:79:79:0b:65:8b:e1:b9:6a:91:a9:8b:
30:ce:da:86:73:79:a0:b4:75:6a:67:94:03:42:1b:78:c4:e5:
8b:28:77:67:d5:92:03:75:67:b1:3c:5d:2c:b7:26:bd:06:c9:
0f:37:13:1c:e4:53:ae:5b:bc:59:c7:b3:e5:8d:fd:6a:63:ef:
06:14:51:58:43:0c:0f:b2:99:c9:64:28:31:72:50:cf:a6:73:
6f:a0:e0:61:7f:81:14:87:cd:72:ff:bc:7c:88:f2:c6:19:50:
14:40:fe:94:cd:6c:22:6f:fc:e2:6a:19:77:50:2c:c5:c4:cc:
eb:ea:f2:79:05:56:49:f6:18:51:50:59:b5:97:6d:f1:1b:d3:
e5:51:70:62:dd:af:3a:f4:7b:b8:41:a0:33:8b:62:76:89:24:
04:98:b8:6d:45:fd:10:86:1f:c6:b2:b6:9a:91:bd:a4:17:76:
84:32:1e:5d:e2:0d:c6:14:95:91:12:a3:43:3d:1a:92:cb:6b:
51:cd:a3:cf:2b:46:3f:3d:f4:5e:ef:68:d1:31:a4:e7:72:c5:
f7:c5:f9:8b:c3:78:02:76:73:74:01:1c:73:ba:fb:ef:44:00:
3d:01:cb:2d:fc:73:e6:3d:d6:95:c8:25:06:f6:74:07:e2:3b:
b5:f4:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:14 2025 by rpki-client