Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
File: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (raw, json)
Hash identifier: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=
Subject key identifier: 3B:49:CF:C8:56:D9:0C:62:3E:40:40:31:FE:5A:BA:F2:00:BB:99:81
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 01A3
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
Signing time: Thu 05 Dec 2024 02:16:28 +0000
ROA not before: Thu 05 Dec 2024 02:16:28 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150351
IP address blocks: 103.17.150.0/24 maxlen: 24
103.17.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Dec 5 02:16:28 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67510cfb-762b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:d4:3a:d0:c9:07:ad:3a:f2:fe:cb:80:11:
58:40:60:12:47:59:e9:cb:f1:5e:e7:64:62:9c:3b:
a9:92:5b:d0:e5:3c:3b:33:27:63:3e:be:6e:61:02:
5e:2b:bb:8b:6a:12:93:9a:7e:a3:40:a4:9e:f0:27:
c4:5f:c3:c2:49:4e:0e:29:9a:9b:7d:83:3d:fb:8f:
78:e5:b4:7e:0c:6f:a5:66:5d:b6:10:c2:7c:80:8e:
7a:f3:0c:68:e5:32:6b:eb:7c:4c:9a:5d:0b:3a:ea:
cf:ab:1c:ab:f1:7a:c2:60:01:2f:bc:d5:91:b6:a6:
0d:f5:4f:d0:5e:c9:aa:ea:18:8b:34:3a:1a:00:f8:
d2:86:26:58:3a:9a:07:09:a0:d7:e6:57:1f:82:a0:
45:76:52:77:ad:db:47:7c:dc:30:3f:f4:ba:05:9e:
54:0e:24:c8:6b:22:62:92:81:7b:43:2a:24:9e:67:
58:e1:22:b0:28:6c:47:17:cf:6f:c0:46:09:8e:ef:
3a:24:94:37:c9:af:f3:d5:4d:d0:1e:d8:40:63:68:
97:b8:5f:14:10:a1:3e:28:e2:b6:d9:6d:d2:c1:b6:
05:7d:98:de:44:67:2e:8b:d3:b6:cb:06:fa:d7:fc:
b9:af:cb:a3:f3:59:05:f0:39:8d:b2:4a:9a:69:0d:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:CF:C8:56:D9:0C:62:3E:40:40:31:FE:5A:BA:F2:00:BB:99:81
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e4:39:0f:9d:de:af:42:34:aa:0a:a1:f4:81:10:57:68:1e:
f2:f6:69:8f:36:85:c7:a2:66:f3:76:41:b0:77:6d:1f:d3:2e:
83:75:b3:8e:0c:05:13:51:c2:16:4f:6f:fa:0b:e7:90:d2:a7:
32:8c:ca:a7:5b:8f:4c:82:ba:08:d9:be:ae:3f:c5:f2:88:1c:
74:ba:01:83:f8:88:0d:68:f5:c3:15:bc:61:f5:6b:11:a8:c6:
43:83:2a:5b:54:7b:d6:f6:72:4f:42:d0:16:59:24:fa:3e:ad:
f5:36:10:51:98:2d:af:2a:b1:29:56:8a:45:0b:28:d8:7a:13:
1e:c7:42:61:88:02:e8:52:c1:06:f1:42:39:9e:b3:9e:b1:d5:
01:91:a8:a7:2c:82:5f:71:c5:56:dc:44:3a:be:49:30:7d:14:
fd:77:0a:28:bc:bb:46:1f:ff:3b:ca:fc:df:71:da:42:90:01:
52:a1:58:02:0e:69:0b:5e:77:2c:d4:81:c5:5b:fa:a7:a3:4a:
20:f8:b9:28:14:15:b3:b8:04:17:8a:79:43:0a:b6:d1:11:1e:
9c:3c:5d:33:14:f1:4b:9a:d1:7f:e6:19:23:d8:c8:af:c2:1a:
bc:87:49:fe:06:0c:96:00:a0:d9:26:0b:ed:48:59:ea:9b:e6:
62:40:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:27 2025 by rpki-client