Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
File: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (raw, json)
Hash identifier: bEQWXluQGkjHtzXhhM0LUOXQhLNvUEvMyEXkpICCpAQ=
Subject key identifier: C1:83:8E:2C:91:DF:A8:AE:00:56:0A:F2:74:99:A9:D5:79:96:40:6D
Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial: 01F5
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
Signing time: Sun 27 Oct 2024 02:07:47 +0000
ROA not before: Sun 27 Oct 2024 02:07:47 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138213
IP address blocks: 103.122.100.0/23 maxlen: 23
103.122.100.0/24 maxlen: 24
103.122.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Validity
Not Before: Oct 27 02:07:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671da073-17d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:5c:29:6b:61:a9:00:91:8d:8f:e1:27:11:
8c:f9:2f:eb:a9:6d:53:03:7e:93:c8:fb:99:50:8f:
83:8d:df:e6:aa:c9:d3:59:f2:7a:d8:6b:69:e8:08:
25:38:df:a6:b4:96:7e:19:19:ad:78:f7:7d:8b:8d:
59:e0:17:12:2c:76:8b:1f:d7:40:08:fc:10:08:e3:
7f:9b:f8:0f:89:ed:df:66:47:0a:9e:47:2a:87:63:
b7:1f:90:1e:cb:25:82:9c:75:b9:f1:a5:58:77:06:
6e:8f:ae:8e:59:d9:55:36:85:65:2a:1b:cd:38:25:
29:4f:1b:30:20:9d:b1:98:6f:4f:a2:1e:ae:f5:40:
f5:15:f0:24:9b:68:dc:df:19:3b:3e:29:1f:25:d3:
f4:df:a0:e0:bd:23:bb:fd:fa:ae:a8:57:69:42:d4:
9a:b7:8a:33:59:46:83:b4:d8:88:5a:12:5b:83:9c:
49:c3:01:56:df:6c:6b:be:b5:65:b1:18:52:b4:c6:
7f:37:8e:a1:fc:87:80:99:36:1a:c4:0e:b9:3e:2d:
11:b9:ff:a5:1a:47:99:09:48:74:94:2a:5c:23:eb:
8d:2d:bd:bf:5d:bb:11:49:b1:19:f3:9b:07:c8:e7:
d9:68:af:f6:88:4b:c9:1a:7c:65:9c:22:67:cf:fe:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:8E:2C:91:DF:A8:AE:00:56:0A:F2:74:99:A9:D5:79:96:40:6D
X509v3 Authority Key Identifier:
keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.100.0/23
Signature Algorithm: sha256WithRSAEncryption
47:f4:e6:89:ba:e7:13:d0:7f:e7:08:d4:70:08:99:a1:f4:1d:
27:f0:2e:01:7f:7f:92:8b:e9:65:a9:e6:93:6b:99:48:6f:c8:
f7:8b:96:be:b3:4a:9f:6a:4a:5b:27:8f:0a:eb:98:6e:c5:d6:
ec:70:ca:23:c2:eb:08:b0:72:41:8e:ec:de:ec:fb:50:e0:65:
79:65:86:0a:d0:0e:5a:a7:1b:a1:23:38:6f:bf:37:55:2c:02:
c4:0e:d1:7a:c5:43:af:b1:b3:b6:2a:da:52:48:e9:94:db:d5:
4c:12:20:30:f1:6a:29:64:9b:84:c5:33:1b:08:63:5f:38:2b:
53:47:4d:36:c3:75:bb:65:c6:7c:1e:25:14:68:bf:7d:4d:82:
b3:e2:0c:f1:d3:6c:fc:9f:0d:b1:97:e8:94:62:0a:11:2d:8f:
b4:67:66:fc:aa:bf:b2:65:c3:d3:22:ab:99:27:65:95:a2:bd:
7f:f9:9a:28:0c:ad:ed:df:29:79:91:96:9b:31:8b:f8:fb:cf:
71:af:d0:ee:8c:41:a1:f6:63:00:c0:ee:ca:e8:33:9a:30:83:
3c:66:78:19:05:65:a3:45:59:38:40:d5:01:c7:3b:8c:ec:fc:
21:5f:2a:38:2f:9c:b4:36:3f:3f:9a:35:69:81:9a:18:41:96:
0b:e1:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:14 2025 by rpki-client