Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa
File: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (raw, json)
Hash identifier: roXdyWanhEz1VmVRl+7k+hRwHYExNJ739SbYutF/VAU=
Subject key identifier: AF:D5:A7:04:D2:A0:1B:86:92:10:8C:A9:48:5D:75:EA:3E:73:23:F6
Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Certificate serial: 0400
Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa
Signing time: Mon 11 Nov 2024 03:27:54 +0000
ROA not before: Mon 11 Nov 2024 03:27:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132139
IP address blocks: 103.149.62.0/23 maxlen: 23
103.149.62.0/24 maxlen: 24
103.149.63.0/24 maxlen: 24
2405:e440::/32 maxlen: 32
2405:e440::/48 maxlen: 48
2405:e440:1::/48 maxlen: 48
2405:e440:2::/48 maxlen: 48
2405:e440:3::/48 maxlen: 48
2405:e440:4::/46 maxlen: 46
2405:e440:4::/48 maxlen: 48
2405:e440:5::/48 maxlen: 48
2405:e440:6::/48 maxlen: 48
2405:e440:7::/48 maxlen: 48
2405:e440:8::/46 maxlen: 46
2405:e440:8::/48 maxlen: 48
2405:e440:9::/48 maxlen: 48
2405:e440:a::/48 maxlen: 48
2405:e440:b::/48 maxlen: 48
2405:e440:c::/46 maxlen: 46
2405:e440:c::/48 maxlen: 48
2405:e440:d::/48 maxlen: 48
2405:e440:e::/48 maxlen: 48
2405:e440:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Validity
Not Before: Nov 11 03:27:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673179ba-ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:58:30:c9:b8:e4:96:55:73:ff:72:6b:18:
f3:b1:4e:09:6d:e7:fc:c3:72:c3:8b:40:7b:65:14:
62:35:6e:a3:12:3e:02:39:13:5c:65:91:c9:5b:ba:
4b:46:be:f3:07:55:5b:c2:97:ce:86:a3:ae:a8:30:
02:10:5d:4c:3c:0b:ae:ca:34:c1:a9:a5:5e:b7:90:
ee:63:38:9b:3b:e9:5a:4e:26:b0:41:8e:7b:c8:44:
72:2f:88:8e:44:ba:a1:6d:aa:9c:7d:84:11:62:7e:
c0:ed:df:a8:c8:7e:23:25:53:3f:f3:8f:e6:75:d3:
d8:45:e4:e9:c0:c3:ec:c5:29:fa:17:c0:ab:89:8d:
15:03:fb:9a:c4:4f:61:19:c8:9d:7e:bb:7b:96:06:
a0:c2:2d:14:f8:7a:92:c5:2f:70:9d:22:5e:30:f3:
2a:68:af:86:79:e9:5d:50:36:6b:9a:e2:b5:6b:da:
11:4a:21:16:b5:3c:1a:5f:69:f1:62:6f:98:cd:92:
16:8e:85:93:39:0d:32:ac:48:2a:11:c8:d3:ec:c8:
a7:35:c3:c8:15:5a:94:91:b4:a7:df:89:22:16:c0:
34:d8:34:35:a8:41:3c:26:0a:85:7a:ce:bc:b4:0b:
65:c6:69:a2:47:f1:b3:38:60:bc:ba:f5:1c:a4:d5:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:A7:04:D2:A0:1B:86:92:10:8C:A9:48:5D:75:EA:3E:73:23:F6
X509v3 Authority Key Identifier:
keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.62.0/23
IPv6:
2405:e440::/32
Signature Algorithm: sha256WithRSAEncryption
48:70:31:67:ec:0c:eb:84:e4:ff:c8:69:82:bf:f7:07:f0:a8:
a9:40:b0:86:a8:04:7e:d5:d7:9d:a3:b1:59:fd:1c:b7:34:1a:
3d:be:69:53:f1:0b:ce:c2:fc:78:62:cf:59:ae:ff:5f:d5:c8:
58:9c:95:64:85:fb:9b:57:df:f7:58:e4:ab:21:db:e0:b1:28:
97:7c:bb:0c:db:87:8e:17:8d:b6:33:ee:18:ef:ac:9a:eb:81:
ec:95:57:46:2b:a7:ed:b9:b8:67:a9:44:85:2c:a9:4a:86:1f:
f0:3c:6a:ce:d6:f9:2d:f3:67:81:68:21:8b:63:15:85:17:f3:
e6:60:28:4a:ac:63:8a:0b:6e:37:3a:76:f4:7e:ad:e6:57:b1:
75:92:91:a4:4c:78:be:b7:ab:dc:f4:c5:43:e2:53:ea:c7:ee:
24:f3:d6:ac:91:fa:0c:89:4f:e7:fb:6c:19:a5:86:d5:e4:32:
56:6a:46:b9:81:8b:47:91:ff:04:4c:bd:1a:fe:f2:f4:4e:2f:
4b:3c:ae:bb:e6:2e:91:3e:40:cd:8d:52:f4:12:47:15:13:8b:
af:2d:34:f7:32:70:84:b8:c1:6e:22:22:00:77:d3:d0:ca:32:
6f:aa:86:cf:bb:40:25:3d:24:4d:94:d1:9a:d8:00:22:91:3c:
22:ec:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:55 2025 by rpki-client