Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa
File: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (raw, json)
Hash identifier: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E=
Subject key identifier: 10:5B:4F:7B:BD:06:10:B2:09:C6:0A:1F:BC:6C:F6:5C:92:B6:74:6A
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 0654
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa
Signing time: Sat 31 Aug 2024 00:02:00 +0000
ROA not before: Sat 31 Aug 2024 00:02:00 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137443
IP address blocks: 103.68.192.0/24 maxlen: 24
103.68.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Aug 31 00:02:00 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d25d78-11c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:c3:f3:bd:1a:51:35:9d:85:68:d0:4b:42:
92:27:ed:7f:5a:92:dd:d5:6f:45:89:51:0d:34:4d:
b3:18:ca:a9:2f:ec:03:5e:8c:66:45:db:32:8a:f3:
5c:b8:b4:6b:6c:89:de:f6:be:fa:d9:45:43:8e:35:
36:02:88:8e:70:d1:82:fa:f3:74:e1:0c:dd:cf:5a:
3b:c7:cb:ba:56:05:32:6a:ea:e8:00:6f:0c:34:68:
3c:a6:8d:56:07:a8:4e:57:d1:28:e8:c8:43:e6:5b:
2e:fe:30:4c:d4:d5:49:16:c1:af:30:7a:b8:c2:41:
00:19:46:00:2a:54:9a:ba:f7:b5:0a:02:52:fe:39:
4e:22:8a:dc:7e:1a:b2:f1:1d:50:18:1a:c0:5d:28:
12:a6:44:72:74:5e:9b:54:7f:d3:1f:de:74:74:44:
20:b5:7c:78:76:27:37:47:90:58:f8:25:fa:1a:96:
7a:28:84:3a:1b:bb:5f:9a:70:d5:53:ef:e2:32:96:
20:b1:ca:52:3a:04:a4:a7:d1:0d:3d:dc:74:5a:1f:
e3:c8:df:5b:6b:68:3f:6a:3b:eb:53:5a:25:0d:07:
62:64:e0:4b:f7:36:16:ab:64:a4:97:a0:ae:d7:7b:
6f:7e:48:97:0b:48:95:5b:eb:42:1e:90:4a:71:11:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:4F:7B:BD:06:10:B2:09:C6:0A:1F:BC:6C:F6:5C:92:B6:74:6A
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/BCC1E04E33C011EE83E9A61BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9f:7a:9c:8c:46:98:0b:de:d4:80:7e:5f:63:87:3f:a5:db:
e9:18:a9:b5:02:b9:96:d6:da:34:8d:70:8c:2b:87:33:9c:53:
ad:76:69:84:8c:d9:50:d6:b7:b7:84:cd:f2:7f:63:23:1c:44:
e4:09:bf:8b:8e:1f:fd:a3:d2:1c:c0:41:59:81:91:75:d8:66:
da:ed:41:f0:55:4f:b7:ac:53:a5:85:46:1d:92:0c:fd:48:60:
d8:3e:d9:01:c0:34:e0:94:aa:c9:1b:da:76:f5:43:70:1f:d2:
6e:df:1f:2b:ec:5f:0c:ea:e4:ce:86:79:e5:f0:11:07:86:ef:
84:13:2f:b5:58:d8:e4:a4:fc:df:d5:d2:8f:ad:58:81:8b:52:
3f:45:0c:ad:06:ad:04:43:0a:e0:e2:a0:1e:73:a5:70:35:62:
9f:62:5c:52:66:f7:cc:65:2d:22:53:42:df:4c:a6:7f:0f:b0:
e7:c3:83:56:1d:c5:b7:06:1b:48:14:e9:2b:44:60:74:ef:61:
63:04:99:12:27:8f:aa:46:2d:3e:42:86:8e:c4:3c:95:8b:71:
dc:82:8d:25:1a:c2:27:cc:9a:b9:c2:bb:37:32:14:f3:be:15:
cb:7b:22:01:f8:2d:0b:d0:e2:66:a4:87:f2:01:59:83:45:3f:
7e:2d:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:31 2025 by rpki-client