Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa
File: 2F581CEA33F311EEABFC7410C4F9AE02.roa (raw, json)
Hash identifier: 0O6TcMZ7cyiTOQX6a4lo9IW8lZvmQl+TflI94IQBsXg=
Subject key identifier: 1D:0C:07:AF:6E:D2:1A:A6:AC:50:A5:F6:5E:93:52:E5:08:F6:30:F1
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 0534
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa
Signing time: Sat 31 Aug 2024 01:03:59 +0000
ROA not before: Sat 31 Aug 2024 01:03:59 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151634
IP address blocks: 103.168.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Validity
Not Before: Aug 31 01:03:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d26bfe-4f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:b0:03:da:3c:0a:96:9d:4e:b2:e8:ba:cf:
b0:08:90:85:92:c5:2d:b2:0f:c1:65:6f:ad:17:fb:
8f:7b:3d:31:60:75:b7:c0:47:08:a8:bf:d5:c7:81:
97:58:b6:34:d4:c4:47:ec:6b:5a:ce:61:11:a1:be:
8f:87:42:eb:30:94:40:6d:64:9a:d2:d3:79:9b:b0:
a7:51:3c:8a:c9:13:93:c7:1d:17:46:3b:75:a0:3d:
8a:0d:c8:69:c1:32:bb:5a:2d:89:68:f9:bc:dd:c1:
76:5a:f1:b6:5c:4c:28:12:31:0d:82:09:0a:48:d1:
f9:c1:0d:97:46:e5:86:c1:f9:e9:47:2c:b1:5a:4e:
9a:f2:0c:41:61:53:10:75:25:9a:5a:8d:60:55:31:
26:46:0e:98:bd:f6:76:19:28:32:21:47:53:0d:aa:
c3:79:85:55:47:78:05:2b:c4:da:e2:ca:e6:bb:3a:
bc:03:cc:75:d7:9b:8f:4b:4a:24:6c:e3:cd:86:70:
47:bc:22:a7:31:d0:d2:23:8f:d8:2f:55:94:a4:03:
c9:06:f6:c4:71:10:7c:54:bb:c8:7c:f8:1d:81:5c:
3d:a5:77:35:07:46:3e:dc:28:6b:c6:96:be:e0:60:
dc:10:61:65:91:36:04:53:11:00:0d:51:fc:e0:86:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:07:AF:6E:D2:1A:A6:AC:50:A5:F6:5E:93:52:E5:08:F6:30:F1
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/2F581CEA33F311EEABFC7410C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.43.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c4:a5:3f:55:1b:35:04:fa:59:ab:aa:89:54:ab:d8:d4:e2:
6c:25:7d:f3:d4:b8:83:5c:65:2f:e6:c8:9d:39:bc:58:88:81:
86:0d:11:be:17:c1:eb:77:7d:b7:01:b4:d7:f2:4a:9a:e6:d9:
30:74:34:1d:89:81:b8:b6:f9:67:d8:42:df:b5:23:d6:01:56:
c4:31:0d:5b:c4:46:4b:81:79:f6:bb:89:7e:a5:6a:7d:ce:15:
eb:52:46:6c:22:3f:ff:db:65:c6:4b:99:22:11:96:f5:23:70:
d3:b3:8f:ab:a9:19:95:62:85:ee:d1:a6:07:6e:fa:ac:1b:13:
dd:3c:38:00:d4:73:c8:aa:f9:31:d1:ac:ca:b8:3d:cc:e5:5b:
b3:17:8b:0e:76:50:e6:89:f5:63:dc:af:64:77:55:f3:33:4d:
83:65:78:01:56:79:0c:f8:91:3b:39:70:0e:2a:d0:8c:76:98:
6a:34:f7:f8:49:e9:0a:91:d8:52:8e:a9:56:a8:9d:d3:19:e0:
27:24:fb:4f:42:c1:e6:c8:bb:7e:8d:73:fe:ba:ea:62:49:b0:
74:b0:97:55:fb:be:4d:f4:1e:82:41:4e:86:7b:49:04:ce:e2:
bd:2f:d3:33:fd:24:3c:5c:ca:96:04:70:67:f3:9b:e2:02:c8:
03:c7:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:25 2025 by rpki-client