Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
File: 87F6FDDC880911EB96D8882DC4F9AE02.roa (raw, json)
Hash identifier: HlAv5VKHlCkHYXAj9IKNWvazVRDv1+Tmr+7FuDlOMWM=
Subject key identifier: EC:EE:29:A8:2B:63:F7:BF:47:C7:1C:95:37:96:00:57:62:62:7F:EE
Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial: 05F9
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
Signing time: Thu 28 Nov 2024 22:42:30 +0000
ROA not before: Thu 28 Nov 2024 22:42:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 133528
IP address blocks: 103.131.88.0/22 maxlen: 22
103.131.88.0/24 maxlen: 24
103.131.89.0/24 maxlen: 24
103.131.90.0/24 maxlen: 24
103.131.91.0/24 maxlen: 24
2403:c8c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Validity
Not Before: Nov 28 22:42:30 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748f1d6-7d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:a0:a3:fd:ec:d7:b1:9b:d3:3c:0a:46:83:
d6:75:4e:2a:b2:46:81:45:aa:b3:a4:b6:af:bf:5a:
60:e6:26:7b:ab:e2:d4:3d:a2:20:72:3e:bf:e4:f3:
7e:bc:08:15:e8:48:32:74:16:07:25:98:22:86:86:
a9:d8:21:3b:1c:e8:e9:21:51:b8:04:3c:53:81:59:
91:62:72:b7:37:7e:cc:08:25:41:cf:fe:bb:87:1b:
2d:5c:ef:a2:ba:e1:ee:f4:69:9c:dd:b3:19:4a:ab:
c1:4e:f6:8c:f5:77:85:7e:a0:ab:25:df:ec:16:84:
8b:ad:f6:f5:a2:2e:65:05:ea:f9:56:fe:99:61:d0:
df:fa:23:11:43:71:34:08:61:d8:16:31:c7:12:1f:
7a:f7:e1:fa:d0:35:6f:05:78:ec:f8:04:0e:40:51:
b6:0a:e3:13:58:0c:da:ce:62:c5:b8:55:4b:b4:54:
b0:70:77:30:aa:79:01:0a:33:0b:8d:75:d4:17:f2:
ad:0c:fa:51:1a:d3:07:ee:24:3d:5f:96:1f:56:f7:
8a:a9:48:b6:05:51:60:41:b0:3e:7b:f3:96:d9:41:
bb:2a:56:35:0d:93:18:08:7f:56:64:f1:88:05:94:
14:aa:77:64:3f:bd:bb:a1:95:45:ad:d7:e2:4d:11:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:29:A8:2B:63:F7:BF:47:C7:1C:95:37:96:00:57:62:62:7F:EE
X509v3 Authority Key Identifier:
keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.88.0/22
IPv6:
2403:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
14:2b:4c:73:b0:0e:76:34:88:7b:24:7c:97:d3:aa:2d:8c:22:
d8:2b:6b:f1:c4:17:3e:8c:4c:3a:df:3a:6b:00:6e:e9:5f:53:
33:4c:29:31:1e:39:26:58:e0:49:d2:2f:15:20:5b:2c:de:89:
fe:18:ae:1a:2e:82:b9:f0:e2:32:ed:74:6f:75:c5:cb:18:98:
27:9f:bd:84:71:98:4d:1d:26:cc:b7:54:b3:92:4f:10:9a:9b:
c6:d3:ff:5d:c6:fd:0d:ff:3c:e3:6e:07:68:63:85:7d:13:d5:
8b:97:10:62:72:bf:9a:80:6e:c0:3d:ca:89:63:eb:d6:24:ec:
04:35:0b:c0:ab:64:00:8a:e4:49:b9:9a:f4:90:40:c2:68:de:
55:34:1e:57:77:9c:9e:52:d8:64:14:61:cf:2d:37:ef:70:e6:
09:c1:72:3c:dc:74:35:8d:c9:97:87:67:94:8a:65:ba:8a:16:
1e:c2:8e:8e:ec:ee:b6:95:da:45:47:89:12:70:02:b4:2d:55:
34:ff:bd:dc:d4:cf:9e:37:26:2e:60:bd:b0:e7:d3:30:da:56:
14:30:cf:cc:bb:8e:c6:24:4e:89:a5:2a:6a:9d:f8:df:67:56:
9d:a6:3e:51:53:12:a7:52:ea:dc:04:c1:5e:32:47:aa:26:3b:
a1:a7:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:16 2025 by rpki-client