Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
File: 116B4B06282011E8BBA2F625C4F9AE02.roa (raw, json)
Hash identifier: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=
Subject key identifier: B2:C6:40:3A:74:B1:AF:11:4A:22:4E:6E:A6:6E:61:D7:21:DF:5A:DF
Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial: 1581
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
Signing time: Thu 16 Jan 2025 17:04:42 +0000
ROA not before: Thu 16 Jan 2025 17:04:42 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136219
IP address blocks: 103.83.228.0/24 maxlen: 24
103.83.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5505 (0x1581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Validity
Not Before: Jan 16 17:04:42 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67893c2a-2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:b2:20:77:42:10:5e:4c:8c:53:e2:3c:22:
d6:05:78:b0:ca:6c:fd:0f:36:3f:4e:d5:52:09:c3:
7f:f9:7f:42:33:70:5f:4f:ac:09:cc:04:6b:0d:27:
82:18:0f:e3:cb:a5:94:03:91:c0:6b:16:6c:ae:4c:
c0:bb:71:a7:50:dd:64:e8:a6:66:37:b7:20:c4:3f:
7e:d8:ca:3e:d8:7f:2f:da:94:95:09:05:17:fd:64:
d1:35:c2:28:fd:8f:4a:c6:70:5a:df:b9:9f:ce:52:
e7:15:3a:c0:28:26:44:d2:4a:db:11:47:a8:4f:0d:
c2:06:91:26:a2:97:82:e7:a8:29:0c:07:3c:c3:aa:
cb:a4:5f:5e:c4:27:4f:3d:11:be:83:1f:43:65:39:
e1:8c:a8:62:f8:63:ff:ef:8c:04:c4:74:cd:b5:2b:
d7:a2:b0:0b:d4:65:53:2c:19:37:55:2a:81:cf:f6:
ee:7d:3e:90:0f:d1:50:19:a3:05:08:b3:6f:09:3f:
06:18:f9:0a:31:26:bd:a4:9c:c3:08:07:cd:d6:da:
56:90:16:4d:78:08:bb:bb:9b:a1:02:b0:99:27:30:
3c:9a:dc:98:4e:02:ba:48:f7:e0:f9:bb:03:2d:f2:
45:a6:a7:c3:4c:76:1c:e7:65:c7:55:bf:df:1d:44:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:40:3A:74:B1:AF:11:4A:22:4E:6E:A6:6E:61:D7:21:DF:5A:DF
X509v3 Authority Key Identifier:
keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/116B4B06282011E8BBA2F625C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:72:1d:46:b7:0f:6e:e4:09:b8:24:8e:c2:f5:0e:99:62:1f:
8c:af:d5:35:68:2e:3a:ce:fb:4b:d9:aa:7a:3a:44:c7:ad:c6:
3b:ec:76:cc:ee:03:d1:a9:02:17:a3:2f:1a:3d:bb:89:d4:f1:
cb:27:ef:a7:86:bc:8f:cb:29:83:62:69:7f:85:ca:a9:19:b4:
7f:ea:95:88:37:57:7e:70:52:c0:f1:8a:e3:16:53:45:7b:de:
59:ac:7d:58:f1:f3:2f:e6:d2:99:f4:2f:ec:3b:65:68:04:47:
c6:6b:d4:81:f4:04:45:63:e2:c7:45:72:48:8e:29:99:74:15:
b9:22:5a:e0:da:25:00:e2:26:de:a5:de:4f:b8:32:7e:b2:02:
52:db:52:c0:b0:4c:22:df:cf:64:3f:ac:8e:4e:43:b9:ce:43:
7d:2b:87:c8:7c:e1:e4:0e:dd:69:d2:7b:c5:36:ff:b1:90:e3:
b6:24:4e:a7:dc:d5:4e:54:fd:e7:bf:76:44:a5:c1:c1:95:9b:
34:65:76:2d:f2:e0:ce:27:26:f4:7a:33:84:ba:03:aa:82:31:
69:cd:c8:e6:34:03:09:45:6f:30:a0:31:b0:71:26:3a:13:64:
41:69:3b:24:88:e1:f9:82:3a:ed:2f:89:08:cb:25:73:58:12:
b3:c3:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:12 2025 by rpki-client