Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
File: 669F81ECC19E11ED9703E456C4F9AE02.roa (raw, json)
Hash identifier: m6XiuJs3pbAGixYyBlP0zdgEX1/NL3vC7CknnokyCZM=
Subject key identifier: FB:10:B4:D5:FD:7B:EC:5D:85:3D:71:4A:B9:76:A4:A7:1E:0B:29:88
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: C9
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
Signing time: Fri 19 Jan 2024 05:26:09 +0000
ROA not before: Fri 19 Jan 2024 05:26:09 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58715
IP address blocks: 103.61.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jan 19 05:26:09 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65aa07f0-86f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:94:ea:e3:f2:d3:69:81:4e:57:38:d4:a5:
b6:08:b5:24:d4:b5:f8:04:29:ea:6a:6e:51:13:15:
0b:2c:4d:35:6d:6f:83:ca:37:2f:5f:29:96:e5:3a:
c2:c7:a0:31:6a:b0:15:be:6f:1f:5d:2c:8c:e6:43:
e7:fd:c1:8c:e1:00:81:a8:ab:34:7f:ed:e4:9f:20:
58:03:a5:14:14:46:d9:06:d7:92:25:0f:6d:27:57:
ae:14:77:cc:bf:ea:c8:28:92:8a:9e:dc:65:6c:92:
4e:42:83:8c:26:24:ac:af:e4:d1:7a:bf:f8:86:b1:
4c:f2:aa:8a:c7:50:b8:c0:d1:24:55:08:6f:55:b8:
df:a3:bd:aa:de:aa:26:1b:53:09:7f:d0:39:d2:8b:
8c:0e:74:15:53:c5:fc:c6:70:5e:f2:29:71:14:0d:
2b:f5:71:a1:49:dc:7d:1e:4f:03:ea:af:c2:a0:4f:
6f:3e:fb:d8:50:74:6d:1e:0e:19:28:8e:dd:0f:0f:
9b:ae:b4:a2:2f:ac:75:c1:94:4e:87:fb:52:bc:24:
90:eb:8d:39:fd:3e:89:c6:2f:a9:b2:8a:42:44:ab:
8e:bf:2e:5a:8d:61:24:c7:30:46:f6:b1:27:64:19:
5a:27:17:da:95:6e:7e:6e:60:82:af:07:da:8b:87:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:B4:D5:FD:7B:EC:5D:85:3D:71:4A:B9:76:A4:A7:1E:0B:29:88
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/669F81ECC19E11ED9703E456C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:77:a6:e0:23:8f:77:57:01:67:ec:ab:c9:aa:49:5a:fc:58:
b7:cf:fe:a8:9e:62:b3:b0:a5:b1:7f:14:d8:47:bd:c3:f6:0f:
5a:1f:87:53:11:f4:81:7a:1b:2c:6b:39:2d:db:b1:d4:fb:77:
48:28:97:98:68:b6:4e:cf:ec:42:26:94:fe:3d:41:c0:07:13:
5e:19:99:06:08:31:85:03:4a:cd:ae:e1:ab:a2:ef:b0:b0:c8:
ac:24:6b:fe:8d:20:fe:4c:bb:f8:32:d2:2a:4a:59:1c:ed:70:
43:55:52:f3:14:0c:23:7b:37:bc:ad:1d:10:9b:88:9d:04:49:
63:07:51:eb:e5:9f:62:db:41:c2:07:c4:88:2a:d0:3a:bc:60:
0d:7d:f6:0a:9e:b6:30:5e:35:0f:6e:1f:08:8d:35:2b:e0:44:
8d:c7:4f:d2:0e:d9:5d:fb:9f:d3:3a:7a:34:54:71:78:f8:7b:
13:4b:80:a7:1c:46:41:57:da:b5:89:09:e8:1e:72:e8:1d:51:
fd:89:49:11:ae:89:18:23:5f:40:0b:79:a5:7d:4e:cb:f8:21:
c9:00:4c:27:92:af:21:30:ef:d8:51:c2:49:f5:0c:6f:ec:8c:
43:be:01:fa:21:3c:53:90:1f:4d:71:3a:3a:07:5d:23:6f:4d:
5a:07:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:20 2025 by rpki-client