Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa
File: 24C853F2AE6411EF9E94822AC4F9AE02.roa (raw, json)
Hash identifier: JDZyv3s2Qwc3bu83urEP0uEoNAGKRBqIwwX8qTLx3RQ=
Subject key identifier: 5A:34:BD:46:83:3E:A1:F2:8E:1C:E9:F6:36:EB:31:21:95:6A:F2:ED
Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27
Certificate serial: 68
Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa
Signing time: Sun 01 Dec 2024 05:47:55 +0000
ROA not before: Sun 01 Dec 2024 05:47:55 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141347
IP address blocks: 103.157.88.0/24 maxlen: 32
103.157.89.0/24 maxlen: 24
2401:a460::/34 maxlen: 34
2401:a460:4000::/34 maxlen: 34
2401:a460:8000::/34 maxlen: 34
2401:a460:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27
Validity
Not Before: Dec 1 05:47:55 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674bf88b-5da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:44:34:9b:5e:55:85:86:7b:7c:4d:6a:05:
fe:16:f6:5c:a4:7e:0d:c9:d4:b4:59:9f:59:e0:91:
02:28:5d:4c:ff:cb:00:83:6a:50:27:02:32:ac:63:
c5:11:4e:43:43:02:3f:ea:29:ae:f3:8a:f1:23:4b:
db:e2:c3:bd:fc:24:53:78:8b:a5:d0:af:15:32:6b:
4c:3b:2e:67:81:86:73:10:c5:68:d7:6e:4c:e9:a2:
20:41:57:3f:15:90:a4:44:e8:ab:95:41:ed:a7:c9:
72:45:d8:61:9a:a2:74:91:54:b0:47:82:1a:30:b3:
ce:65:23:af:71:40:27:5c:6d:30:c7:45:d9:26:e8:
70:32:51:85:10:7e:b4:66:c7:05:21:96:50:49:c9:
e9:18:5d:56:63:b8:71:0d:e3:7d:96:7c:9c:87:76:
c1:2a:76:72:da:a9:07:19:bd:b6:aa:9b:36:e0:b8:
7b:ba:fc:25:26:44:58:cd:3b:f7:36:b9:b5:1c:f1:
84:66:e6:8f:60:0d:31:aa:b3:18:75:cd:4f:22:ca:
16:b1:c4:5d:f7:14:52:fa:85:e3:76:0f:f1:ad:90:
9b:0b:6e:42:ce:b7:ac:2a:dc:35:21:24:de:4b:f6:
10:02:14:7f:f0:64:60:14:ee:1b:98:8e:9f:4c:62:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:BD:46:83:3E:A1:F2:8E:1C:E9:F6:36:EB:31:21:95:6A:F2:ED
X509v3 Authority Key Identifier:
keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/24C853F2AE6411EF9E94822AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.88.0/23
IPv6:
2401:a460::/32
Signature Algorithm: sha256WithRSAEncryption
07:0f:83:a9:8d:e5:d6:85:48:ea:dc:de:17:19:64:78:7b:22:
9a:b6:0b:ce:63:1e:3d:0e:f0:8b:84:3e:81:f9:a2:0a:84:45:
b8:a6:10:8b:ec:26:e2:22:f7:8a:29:80:1c:3e:8f:9c:da:e5:
a7:23:d3:1b:ef:1b:1d:69:1b:f5:78:c6:bf:fe:d7:2f:aa:9b:
36:a6:f7:b8:fe:01:18:bf:c2:ff:fd:b2:dd:28:db:af:ea:ad:
e5:21:9c:17:c8:39:9b:b3:a3:a9:c3:67:30:13:a8:80:26:08:
7f:8b:35:99:c6:5a:39:31:4c:77:e7:65:07:19:c6:47:4b:1b:
a5:eb:82:1c:bd:7c:24:f1:df:02:1a:5d:f3:a1:ba:76:fc:9e:
dc:c7:5b:8a:32:b6:1d:98:f8:d9:1b:8b:a4:66:9c:3f:df:f8:
c8:f3:3d:12:e1:ee:5b:ac:4d:05:21:ab:a9:a8:d8:62:64:7d:
25:66:4f:ac:83:3e:4b:f2:ec:53:93:42:f0:24:92:fb:f0:d7:
e7:e1:a0:44:c1:3e:90:0b:3a:e6:41:5c:13:d7:a9:a3:f9:d7:
ef:db:8c:a9:36:17:75:ed:c4:19:6c:ee:2b:42:15:de:a7:93:
0e:c5:e4:78:e1:13:a6:c0:0c:a8:17:76:7e:06:3f:76:da:63:
b3:ee:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:26 2025 by rpki-client