Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
File: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (raw, json)
Hash identifier: zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=
Subject key identifier: 09:E6:42:6D:89:99:A6:1F:7C:CF:A6:3D:AD:5F:08:FC:E4:2E:36:5A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 1737
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
Signing time: Tue 30 Jul 2024 17:14:16 +0000
ROA not before: Tue 30 Jul 2024 17:14:16 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132018
IP address blocks: 103.21.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5943 (0x1737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Jul 30 17:14:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a91f68-7b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:d5:68:8d:03:07:cd:c1:f1:1b:94:3e:36:
f2:4f:58:5e:e0:dc:42:df:a1:8e:da:98:50:4b:01:
22:37:a7:4e:ad:c9:15:bf:4a:c2:ac:c3:6c:de:2d:
5a:fd:fa:2e:cc:1e:93:e8:37:74:42:38:42:87:de:
1c:58:09:03:d0:fa:84:22:03:7d:a2:23:5a:15:b5:
d8:47:44:30:0b:57:82:20:21:62:02:31:09:cb:bc:
63:2a:11:72:ee:3d:09:be:69:3a:b6:77:39:6b:21:
d2:2b:c7:63:6c:28:a2:a0:62:b4:44:99:df:e7:48:
4b:ce:e3:ca:1d:56:30:f2:60:88:58:87:10:9d:20:
92:66:c5:85:65:f5:50:77:56:23:15:85:e7:12:03:
ca:4f:6a:39:64:5e:24:6b:7e:f6:08:be:0d:39:18:
88:24:84:87:48:97:61:e1:b6:d6:07:50:35:e8:4d:
ae:18:f7:69:7c:7c:bf:c2:e6:61:3d:68:9a:93:cd:
ed:56:43:f4:de:9b:19:bc:8b:29:c4:64:5f:bc:0a:
ec:d4:5e:d8:bf:71:ab:4a:e6:4b:3a:51:da:cb:f4:
f3:84:a8:aa:72:6a:e4:c2:21:d3:e8:9c:93:22:4f:
98:d1:87:48:b5:43:69:2c:86:52:a3:4e:2e:c5:39:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:42:6D:89:99:A6:1F:7C:CF:A6:3D:AD:5F:08:FC:E4:2E:36:5A
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/0EB22CD66BBE11EDBF717818C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.192.0/24
Signature Algorithm: sha256WithRSAEncryption
43:10:f9:25:13:04:10:71:89:60:9b:c2:86:76:20:9a:3a:9d:
b3:e9:1e:a9:d5:71:ef:c3:31:c3:ab:05:8e:27:7b:8f:43:5f:
43:94:c5:00:46:45:20:ba:4e:9b:e0:63:af:72:87:87:bb:63:
ac:95:12:56:dc:13:2c:33:3d:2a:c6:be:b8:0a:75:e4:bc:ef:
09:ba:cc:d8:7e:86:83:71:c4:1e:1c:c9:b4:78:b7:90:aa:26:
e7:98:a9:d9:6b:9d:c4:56:ff:cb:32:e4:69:f3:13:ec:5e:20:
6a:3a:4a:91:8e:fe:73:23:8b:4b:fa:fa:57:14:6b:c1:f1:f1:
86:d9:48:36:84:8c:fb:43:b0:c2:c9:df:92:cc:a8:68:cf:d2:
ee:e5:0c:25:b4:8c:74:c3:e1:ea:c8:92:12:ea:5c:b1:e3:33:
e5:af:7e:9f:73:a2:18:5e:18:ea:09:9a:57:28:e4:69:5a:50:
13:83:f7:44:a8:84:5b:ae:a0:6b:f2:58:96:b0:6f:dd:31:51:
da:11:11:0b:35:63:ce:a0:e2:ca:64:8e:85:35:bc:f3:f1:40:
03:17:3e:07:5d:01:62:26:5e:dd:c1:40:c8:98:d5:59:19:ff:
aa:ee:7f:87:fa:1f:6e:2c:72:66:4f:4e:69:ce:0f:47:83:90:
c3:7a:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:49 2025 by rpki-client