Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
File: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (raw, json)
Hash identifier: dLPra4EoZ+/bT5SYFH8IAddwcEybHTxE3E/d5NwypeI=
Subject key identifier: 2F:34:D6:6A:5F:1B:A2:B4:FA:9C:C3:E6:E7:F8:E6:16:DE:89:A2:B9
Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial: B3
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
Signing time: Wed 29 Jan 2025 12:58:43 +0000
ROA not before: Wed 29 Jan 2025 12:58:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137432
IP address blocks: 103.153.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Validity
Not Before: Jan 29 12:58:43 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=679a2603-3f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:86:46:bd:55:a2:e9:df:9e:58:8f:bc:cb:b8:
15:47:a8:cb:61:31:f7:06:7e:87:9e:62:f9:ab:23:
fa:c6:87:6a:8d:4e:5d:c1:14:4d:66:f3:b1:3b:ea:
e5:a6:1f:48:9f:9b:06:43:e3:68:72:3a:d6:09:dd:
5a:6d:dc:27:4a:2a:ef:e2:66:84:77:8f:7c:c4:9c:
ab:14:59:0e:fe:1c:30:f7:cf:c8:62:d0:88:a2:86:
86:3c:78:cd:96:b5:59:48:35:38:ba:25:dc:b1:02:
9a:29:be:36:aa:6f:8c:49:15:27:37:f3:9d:be:e0:
b1:78:8f:be:f8:1b:43:70:36:39:d4:f9:8b:61:3a:
08:b0:37:b1:0e:55:c2:62:1c:60:ff:36:c3:93:7b:
58:50:ef:60:40:b2:a7:48:2e:3b:09:a1:4b:99:bc:
e7:f9:3c:65:1d:e6:cf:8c:f3:bf:05:80:f7:29:10:
b0:15:c1:87:3e:cb:47:72:a0:79:56:b1:78:ee:90:
0e:82:c1:f5:2d:90:b8:65:52:50:40:83:c1:24:c0:
86:f6:6a:20:b5:2e:90:a9:67:ac:5d:47:71:2d:7a:
0d:6d:fd:00:2e:4c:37:3a:1e:a3:5b:8b:77:7d:97:
ba:e5:94:60:71:68:ec:2f:68:53:09:91:e5:a4:72:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:D6:6A:5F:1B:A2:B4:FA:9C:C3:E6:E7:F8:E6:16:DE:89:A2:B9
X509v3 Authority Key Identifier:
keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.52.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f3:3f:66:fc:cc:a0:bf:3e:59:61:63:65:b8:8b:00:7d:ee:
cb:f9:9d:2b:64:ba:e8:dc:81:57:f1:1c:07:2c:04:83:9f:51:
18:37:82:82:b9:fc:5f:4c:21:3f:dc:2b:fb:94:33:7f:24:d5:
17:55:6e:d3:8a:dc:4a:d4:fd:17:5b:b9:dd:d7:af:88:88:82:
59:19:69:fa:88:53:fd:21:af:28:39:1f:b6:9a:91:67:21:2a:
c3:07:30:82:72:a2:16:d3:ad:c8:56:cd:0a:78:20:5e:1f:95:
4c:fa:25:11:be:25:69:f0:53:98:8f:32:db:86:52:f6:31:12:
7b:14:6c:71:ec:c3:94:01:14:69:70:44:0f:ea:f0:51:ea:32:
7d:96:06:5e:32:69:68:c2:cc:30:8e:56:58:e1:56:1b:3a:53:
b5:71:6d:2a:c4:00:1e:83:d1:05:06:66:3c:72:9e:0d:15:9d:
d0:1a:fa:50:46:bb:3d:1f:aa:8b:8a:f6:68:1a:8e:79:bb:22:
32:23:9d:14:88:ec:87:67:b2:0a:2c:85:1e:45:c5:71:a6:ee:
04:77:ba:67:4a:a5:8f:34:b0:8e:5b:dc:89:b9:86:56:81:cf:
8b:73:19:08:d2:cf:21:3e:7b:ea:a6:93:57:90:45:e3:75:7b:
e2:da:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:40 2025 by rpki-client