Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa
File: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (raw, json)
Hash identifier: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=
Subject key identifier: 39:11:D0:02:17:3B:5C:A0:ED:62:A7:88:F8:05:C7:A0:5E:6E:43:07
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 6F
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa
Signing time: Wed 19 Jun 2024 08:21:10 +0000
ROA not before: Wed 19 Jun 2024 08:21:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134378
IP address blocks: 103.63.92.0/22 maxlen: 22
103.63.92.0/23 maxlen: 23
103.63.92.0/24 maxlen: 24
103.63.93.0/24 maxlen: 24
103.63.94.0/23 maxlen: 23
103.63.94.0/24 maxlen: 24
103.63.95.0/24 maxlen: 24
103.153.120.0/23 maxlen: 23
103.153.120.0/24 maxlen: 24
103.153.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Jun 19 08:21:10 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667294f6-bf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:10:c2:09:48:62:d8:08:e8:58:7c:62:14:
e7:2b:30:9f:85:20:16:d6:69:70:81:13:79:d8:a7:
b4:27:6d:2c:cf:32:14:fb:bd:3d:bb:f7:e4:d9:be:
4e:36:10:e0:92:18:4a:d5:a5:98:5b:de:d6:27:c7:
ec:a9:7d:02:39:a2:1b:a3:d9:1c:20:85:26:58:08:
82:7f:00:c1:0b:8e:c6:a9:3a:30:70:92:5d:1d:bd:
fb:e4:12:b8:0a:37:e8:36:56:fb:4d:19:c2:81:26:
f2:a9:29:f1:45:a7:74:32:29:c0:7b:db:b9:36:47:
dd:4c:33:ce:7a:f3:62:6a:09:e4:04:0a:30:d8:65:
9e:36:08:9f:79:c5:18:c5:e4:fa:bc:84:14:82:78:
05:0b:e3:cd:22:d0:cb:dc:d2:42:18:a3:6a:ba:6d:
0a:79:be:e6:a8:33:96:ec:9d:d6:82:e6:dc:40:7b:
b7:4c:51:ac:86:4e:1f:e7:56:a4:8b:77:7e:35:5a:
32:03:cc:d0:b8:72:d2:6c:1c:2a:57:24:dd:6c:0d:
28:60:65:e1:0c:a3:21:47:f6:15:84:06:cb:ea:77:
bf:a5:90:8d:6a:c4:2e:06:da:24:bc:c6:da:f3:c9:
f9:94:f4:75:b9:3c:c2:d7:d6:8f:6c:a2:f7:9e:85:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:D0:02:17:3B:5C:A0:ED:62:A7:88:F8:05:C7:A0:5E:6E:43:07
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.63.92.0/22
103.153.120.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:6c:df:50:66:87:a0:45:7b:f8:90:24:53:d3:79:ae:e2:d1:
8b:e1:41:23:5a:11:7e:da:bb:06:7b:fa:44:5f:d2:63:01:b6:
aa:5f:20:7f:c6:50:51:87:5a:80:7f:4d:0b:86:02:cd:81:af:
58:1d:9d:42:00:18:14:52:94:67:b6:04:3d:b7:f5:1f:c6:d1:
23:38:a2:5f:70:64:e5:9b:dd:4d:cc:fb:71:09:a9:af:bd:c6:
8c:d3:48:58:d0:0c:01:46:ad:47:f5:eb:b6:11:7c:d3:5a:10:
62:18:39:f4:d2:42:6c:81:0a:4b:79:8c:0a:75:d5:5a:59:e9:
9d:eb:a1:b2:4e:87:6a:7f:f0:29:73:8d:79:d5:45:6e:66:a7:
e1:c5:2b:a5:2f:52:ec:bb:c4:16:ac:62:b9:be:0f:b3:32:6d:
e7:20:c3:2c:e6:28:cd:0d:2e:5d:42:40:6e:f9:89:05:12:9c:
07:bd:66:a1:6e:24:aa:fb:64:4a:40:08:7d:21:9b:05:42:b8:
05:05:f7:43:57:ab:fa:7d:d8:c5:c5:fd:0a:11:46:55:5f:14:
97:09:69:35:ec:dc:ad:db:01:84:28:85:db:fc:50:67:f7:f4:
08:2a:f7:60:1f:f9:a6:bf:7c:f7:cd:91:25:02:ad:6a:1b:b2:
a4:8a:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:34 2025 by rpki-client