Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
File: 4F7AD592169311EB89C20F1DC4F9AE02.roa (raw, json)
Hash identifier: XKVyEB5gGMdbZZklWgaxiu1Qm2EFMmnpQEz2Juw2PmY=
Subject key identifier: FB:B4:F4:89:E8:EE:35:8F:FB:EA:E4:31:58:E6:D5:97:BD:4D:FD:71
Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial: 06A6
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
Signing time: Thu 28 Mar 2024 23:31:56 +0000
ROA not before: Thu 28 Mar 2024 23:31:56 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136986
IP address blocks: 103.149.39.0/24 maxlen: 24
103.162.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Validity
Not Before: Mar 28 23:31:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6605fdec-6b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:17:21:84:9b:1c:32:dd:20:09:3b:81:45:
3a:89:2a:11:7d:f7:55:ce:7f:45:a0:e8:ff:0b:71:
05:c1:8c:2c:c2:65:38:38:b6:a6:9f:26:cc:82:06:
f8:bd:2b:f8:c5:a9:86:56:8f:ae:37:34:31:2a:67:
e2:07:f2:43:9f:80:5e:ba:e4:11:06:28:b4:cb:b8:
4c:19:f6:6a:22:e2:0d:c1:8c:43:a7:c2:33:13:8e:
80:13:83:f0:ce:3b:a6:fb:a9:8a:9f:80:d5:48:e7:
07:40:6e:02:88:b9:b2:ec:9d:ff:d3:8c:fc:c5:8d:
5d:0d:11:bb:58:61:c2:9c:ef:31:58:26:4e:5b:b7:
ca:9b:bf:ea:0b:62:97:8c:b2:06:05:58:07:0c:cf:
3a:7b:da:98:b7:1a:5b:1d:ae:cc:a4:f7:f6:e3:2c:
a7:9b:4f:b1:e9:4b:e2:63:ab:3a:eb:94:e9:f6:2d:
2f:ef:d3:57:07:e8:98:c3:b9:92:83:20:52:94:f1:
27:cf:e7:f9:4b:74:a0:ca:fb:a0:1d:05:70:8c:f7:
13:9a:74:0d:ef:56:9b:8b:2a:2f:f7:d4:15:a7:70:
09:a4:78:74:42:ac:25:e8:15:22:24:0d:57:67:4b:
8c:15:e5:8c:76:f5:79:bf:20:b0:8e:86:2f:a3:ff:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:F4:89:E8:EE:35:8F:FB:EA:E4:31:58:E6:D5:97:BD:4D:FD:71
X509v3 Authority Key Identifier:
keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.39.0/24
103.162.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:9c:e1:96:ce:47:c9:80:c6:02:50:de:1a:4c:9e:a6:5e:
12:8c:60:8a:75:22:b6:60:ea:23:95:6b:40:3d:28:ce:4e:57:
d7:58:c4:b7:8a:9d:df:3b:c7:ab:33:32:de:60:a2:dc:55:fc:
61:70:68:10:ec:f9:91:bf:50:c0:30:a3:5a:1f:5f:95:14:54:
29:97:ea:ad:2f:fe:03:34:de:18:a9:9e:89:b4:fd:ca:24:8d:
3f:73:ed:9a:18:6c:f5:80:29:aa:60:e9:8c:9f:c1:51:12:ef:
18:ae:0b:96:73:49:96:29:77:61:93:05:79:0e:55:26:6f:12:
41:80:40:a8:e3:59:45:4c:2e:e7:91:4a:94:34:39:c3:31:29:
9c:72:77:8e:91:75:f8:3b:41:c1:a1:73:ff:60:b9:e4:7c:7a:
e3:28:30:ef:e7:c6:1b:a7:98:53:de:f4:5b:de:65:15:af:67:
56:39:47:77:84:c0:92:b1:35:76:3c:b4:6e:e8:bc:e5:1b:cd:
99:30:0e:65:b3:e5:06:98:ee:7f:90:6f:e0:e4:44:84:04:50:
57:67:3a:01:19:e8:ab:b5:d8:c5:49:f1:03:da:ed:d0:fb:14:
78:01:0d:d6:9b:0a:27:df:aa:12:30:f5:3c:3f:48:49:c6:99:
a7:49:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:35 2025 by rpki-client