Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa
File: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (raw, json)
Hash identifier: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=
Subject key identifier: A7:9D:9D:8E:72:65:24:55:9F:57:35:DD:7B:0F:A5:DB:39:2A:74:37
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: D4
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa
Signing time: Mon 04 Nov 2024 12:52:47 +0000
ROA not before: Mon 04 Nov 2024 12:52:47 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139008
IP address blocks: 103.213.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Nov 4 12:52:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6728c39f-271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:26:2e:ec:3a:5b:98:6c:2e:c5:06:f8:71:
b4:7b:0e:7a:1c:bd:03:5f:5a:4f:ca:7e:5f:8c:57:
06:96:8b:9b:db:bb:6d:30:3d:d2:03:9c:b2:6e:32:
df:46:c9:ca:e1:04:20:cb:db:86:c2:bf:bb:ec:8a:
9d:80:82:df:5d:ee:4b:cb:a0:b6:e0:ad:0e:96:26:
86:6d:d2:f3:0a:d1:56:aa:a3:57:d6:8b:01:da:7b:
79:7d:77:86:46:a0:b4:02:da:e4:69:0d:24:37:42:
75:12:da:0e:e2:47:fa:10:d5:a6:e2:41:77:66:52:
d3:e0:80:39:d4:65:99:00:cb:89:e8:a9:4e:bf:a8:
79:27:65:a2:fa:37:bf:03:b0:47:92:17:36:64:a4:
fa:db:f7:ab:89:e7:2e:77:fe:26:9c:79:b0:59:39:
9e:e6:78:e0:c3:6f:44:17:f2:ee:6a:1a:ec:cf:4f:
9e:9b:05:a7:91:c9:0a:09:09:88:7c:75:1f:24:35:
c6:77:fc:5e:f8:ce:9a:8a:b6:07:4e:9c:3b:41:1f:
73:5b:36:8d:bc:f5:ff:0c:3a:15:45:61:72:71:3d:
57:8b:70:c4:00:3f:ea:92:53:52:26:8a:83:6a:b7:
b0:14:c5:12:0c:52:f1:80:a1:19:86:fc:73:51:c9:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:9D:8E:72:65:24:55:9F:57:35:DD:7B:0F:A5:DB:39:2A:74:37
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/B0D084CC9AAB11EFAEA9A178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:54:7a:e2:d4:71:dd:4b:c0:f1:76:84:38:47:96:b7:6d:8f:
50:90:11:b2:14:35:04:6c:fe:29:56:a0:0a:ce:ea:e9:97:3e:
9f:62:21:85:18:95:82:c5:8a:b3:20:d2:ad:cb:bb:14:5d:f9:
34:16:e0:a8:c1:a1:23:64:99:68:13:de:b3:73:df:d9:93:94:
64:9d:6d:aa:41:f4:f9:57:37:83:f9:e8:e8:87:67:ea:50:63:
dd:3b:79:69:d3:40:4e:d6:ca:bc:3a:7f:56:19:73:b0:20:84:
21:18:05:01:df:5a:b0:6f:54:4b:e7:b9:fd:1b:16:17:e9:a7:
5e:b7:a9:a2:59:37:34:47:75:7a:66:20:9e:a4:15:01:bc:9d:
fe:91:bc:65:87:c2:f3:9e:04:df:e6:b6:2f:8f:da:e5:9d:26:
99:bd:a8:12:98:c8:dc:41:a8:e6:7b:9e:71:1c:5e:2d:78:12:
8e:35:41:ed:5f:cf:94:54:79:f0:ed:b3:45:2a:93:01:41:74:
0b:1c:83:82:4c:30:84:26:2f:7a:59:e1:f9:5b:f5:ea:2f:ad:
1b:fe:07:de:a0:80:f3:ee:72:02:b4:d9:3f:4c:32:dd:19:6b:
12:82:ec:7b:0e:ab:96:80:5c:97:9c:6a:53:b8:45:09:2a:fc:
72:e8:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:58 2025 by rpki-client