Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
File: C698E13ED1BD11EF9C00D867C4F9AE02.roa (raw, json)
Hash identifier: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw=
Subject key identifier: 03:D5:D9:90:A2:CC:D6:C4:9D:90:4B:9D:B1:16:40:80:DC:DA:6F:4F
Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial: 010D
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
Signing time: Mon 13 Jan 2025 14:50:48 +0000
ROA not before: Mon 13 Jan 2025 14:50:48 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.190.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Validity
Not Before: Jan 13 14:50:48 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67852848-eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:8a:d7:10:6b:5b:91:c4:08:d4:8f:e4:01:
f4:ca:b9:39:2e:b9:c2:22:bd:2a:6c:eb:9f:73:ff:
14:e2:02:17:bd:6f:bf:97:ef:9d:a3:11:d9:7e:1a:
ff:64:50:8f:22:cb:e6:6e:6a:e2:25:36:f7:81:fa:
d5:79:16:2f:83:c8:7d:e0:e5:98:4f:12:dc:7a:ef:
9a:a3:88:f6:e7:22:37:82:c1:ad:26:24:80:50:de:
7c:0d:79:43:3d:28:f6:51:bb:a0:00:aa:1d:9b:19:
0c:5a:66:85:d2:61:d0:77:1d:07:fa:0c:cc:51:83:
6a:13:85:85:8b:f3:18:21:71:bb:fa:cc:3c:27:44:
a9:51:19:93:72:ec:e5:27:a6:67:29:44:c2:7c:c8:
e3:82:52:b4:06:c4:7b:a7:51:42:bb:6a:d3:4d:e1:
36:2c:ec:6b:27:76:fc:a6:9d:54:8e:0d:16:ad:69:
20:af:f5:74:e6:e8:b1:e7:76:d9:14:0e:3c:bb:8e:
26:9f:c9:65:4f:ee:08:49:03:60:eb:c1:ae:99:47:
64:f5:90:e0:61:e9:c1:5c:69:73:82:ee:1f:a0:57:
42:08:72:64:24:f8:07:31:cb:b4:53:d3:07:e4:f5:
86:27:50:b9:e6:03:84:e2:bb:65:9a:fb:a9:d6:f1:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:D9:90:A2:CC:D6:C4:9D:90:4B:9D:B1:16:40:80:DC:DA:6F:4F
X509v3 Authority Key Identifier:
keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/C698E13ED1BD11EF9C00D867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d4:e9:74:94:be:7d:1c:e2:5a:93:cd:7b:0d:d4:34:08:e3:
60:c9:16:db:09:5c:89:c6:e4:69:4a:7a:cf:09:23:ee:3a:b5:
79:b4:9f:bb:73:0a:52:6c:a0:4e:40:76:a1:0a:8f:ca:40:5d:
04:5d:98:7b:ce:e1:6d:64:0f:d3:09:a7:ba:4e:8b:a5:2a:25:
a2:8e:11:0b:c0:6e:56:3c:88:0a:38:8f:b2:6d:25:27:59:fb:
20:8a:db:5c:38:cb:7b:af:62:c2:0a:e8:25:84:5f:6c:5a:6d:
2f:23:9d:b1:4e:ee:6b:68:41:93:48:1a:c0:b2:05:2f:98:1c:
9d:bf:d7:aa:34:92:26:5a:55:fa:00:9d:35:fc:2e:3f:65:79:
20:fe:b3:ab:82:b2:64:98:74:f5:43:6e:16:2f:1c:1d:12:1e:
8f:2e:52:f1:06:46:8e:cf:e0:0c:e5:c8:f3:b2:41:0c:c5:c2:
da:55:41:36:94:4d:d6:d6:37:84:fa:da:e1:56:fb:04:67:b8:
d5:43:33:d2:e5:a6:96:69:d2:b5:f2:b3:3e:b1:47:98:18:2f:
ac:df:0e:ba:56:24:3c:51:27:b8:50:31:21:1b:7b:a4:80:04:
b7:7f:48:e6:ac:21:50:8b:10:93:79:cf:e2:9f:7e:d8:9b:b1:
7c:23:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:55:08 2025 by rpki-client