Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa
File: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (raw, json)
Hash identifier: TvZTCjtY/MqAPd09oJIBlyWGnc4wKC2c8loStM73Hdo=
Subject key identifier: C8:9C:C9:01:5F:BB:47:B4:0E:D7:66:AB:96:C4:C3:E0:4B:7F:D1:98
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 06EE
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa
Signing time: Fri 28 Jun 2024 23:27:58 +0000
ROA not before: Fri 28 Jun 2024 23:27:58 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 19905
IP address blocks: 103.225.112.0/24 maxlen: 24
103.225.113.0/24 maxlen: 24
103.225.114.0/24 maxlen: 24
103.225.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Jun 28 23:27:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=667f46fe-96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:d9:6f:45:77:0b:3c:b6:b6:b9:24:66:71:
7f:ec:37:8e:03:ae:71:8d:b5:16:1b:2c:6e:ee:4e:
2c:1a:4e:8d:5a:72:b8:ba:44:e2:c5:db:dd:ee:48:
a0:98:09:dc:23:e1:f5:92:ae:90:22:5a:22:49:83:
97:ec:12:5c:27:30:92:7e:52:27:fc:98:23:b1:06:
7d:46:cd:93:76:1c:01:b1:37:e6:be:22:5e:ad:fb:
6f:ed:67:85:f3:10:67:d5:db:7b:e0:39:2e:60:cc:
1b:10:aa:97:15:59:f6:d1:d1:8e:de:3f:09:d7:e5:
f8:f5:80:e0:20:51:e4:89:c6:b9:5e:58:b3:81:df:
7e:16:7d:a8:44:d7:0d:9d:c7:9d:03:e4:66:2c:de:
3a:15:f5:14:16:58:c0:87:73:a6:98:6c:a1:b8:57:
b9:5e:d2:ba:dc:4d:50:7f:f6:cb:21:bd:7c:8b:68:
73:61:89:51:92:1b:fe:3a:0f:85:2e:11:ff:42:14:
01:e6:03:d4:2d:98:2e:35:91:1a:61:ce:51:89:9f:
4d:fb:00:18:0a:9d:f6:ea:41:99:e1:3f:ec:ce:fd:
a1:15:4c:6e:15:f8:74:c3:82:06:82:a4:10:e4:2c:
94:e0:68:60:b0:2a:b5:45:c7:52:1a:99:99:90:9f:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:C9:01:5F:BB:47:B4:0E:D7:66:AB:96:C4:C3:E0:4B:7F:D1:98
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/99DF3B20183A11EBB9F78E80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.112.0/22
Signature Algorithm: sha256WithRSAEncryption
73:9c:64:e2:1c:ff:6f:98:89:63:74:be:0a:1b:65:e4:15:6f:
ec:69:42:61:02:03:b0:61:a9:ec:c3:97:21:74:33:4d:f9:69:
fd:85:5e:bc:8b:51:a1:f8:59:7b:7c:31:05:68:ed:fa:21:ac:
91:54:e2:9c:70:40:99:80:a1:d0:f1:2e:80:0b:2a:ea:97:2b:
d3:67:a3:6e:18:8a:52:1b:bd:c6:26:75:0d:74:39:19:9c:81:
80:02:3d:3a:3d:95:56:25:a0:de:5c:d7:ad:84:27:f5:d9:2a:
e7:92:e2:f9:21:ec:2a:66:7c:64:42:8b:ca:6b:dc:ba:1e:bb:
b5:63:82:d8:0b:a7:3c:4a:fa:40:4c:dc:6f:ed:e6:27:b5:84:
0f:d8:2d:87:8b:29:80:f1:aa:0d:97:f2:8f:46:6d:56:58:c5:
b8:53:c9:b0:60:27:be:3c:bc:21:57:8c:61:77:55:59:61:d0:
87:d3:fd:37:63:31:a9:77:6e:6d:23:c2:78:bb:b3:c5:af:19:
a4:91:8a:ac:cb:22:4e:cc:21:ae:d3:10:46:6b:00:ba:19:f0:
22:9b:55:c9:4e:1c:ac:52:2d:0d:37:bd:ea:31:81:a2:28:d5:
88:ef:fd:56:ff:7f:6a:cd:70:c6:fa:38:57:79:42:5b:76:83:
77:27:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:51 2025 by rpki-client