Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa
File: 1E018994AEBF11E993F33C65C4F9AE02.roa (raw, json)
Hash identifier: X/Sdq5hIJBEWvLlKJlrKk+UmqaZwGN/XOEju9L4WvGs=
Subject key identifier: B0:91:E5:1C:C2:57:8E:23:85:03:E6:1F:8F:C6:98:2F:9A:A7:0A:83
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0D08
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa
Signing time: Thu 08 Feb 2024 18:36:50 +0000
ROA not before: Thu 08 Feb 2024 18:36:50 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 63526
IP address blocks: 103.106.236.0/22 maxlen: 22
103.106.236.0/23 maxlen: 23
103.106.236.0/24 maxlen: 24
103.106.237.0/24 maxlen: 24
103.106.238.0/23 maxlen: 23
103.106.238.0/24 maxlen: 24
103.106.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Feb 8 18:36:50 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65c51f42-4a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:79:75:c0:4a:0b:c0:fa:88:22:49:fe:d9:
3c:da:64:d0:c9:9d:8a:07:e2:f1:8f:ba:8f:43:a6:
6e:b5:71:62:1c:5d:ef:6a:f5:d9:47:a5:de:f2:70:
1e:a6:4b:fd:b9:f7:6a:9d:2e:84:8f:f1:7e:c6:24:
e7:60:5f:b7:1f:0d:cb:1a:ea:1e:f5:c9:b0:9b:7c:
a2:93:80:bf:c1:54:f3:0a:c7:d4:3c:03:ba:84:4f:
50:b9:aa:52:a1:e4:68:26:76:fc:f3:96:d0:ca:e8:
2f:00:a9:c3:65:f6:74:66:ce:8e:31:8e:68:61:dc:
33:5e:33:c7:66:36:48:c2:c1:93:cd:5b:07:c5:91:
5f:c9:cd:91:7f:1f:35:6c:ce:6d:c5:73:f2:a6:1e:
6e:a1:f6:39:93:01:3d:09:31:10:27:78:79:a7:3e:
40:f5:f1:f5:33:2a:b4:4f:87:6c:01:95:ca:54:c8:
33:3f:4a:8b:9d:5a:9d:89:74:94:1e:85:84:29:24:
70:58:61:1f:19:20:1a:0f:37:a8:b2:3f:52:ce:8f:
be:4f:16:43:a6:87:15:fb:7f:18:80:d0:5f:7d:13:
99:1c:82:35:ce:f5:18:6f:0f:2d:d3:b4:d1:e1:0f:
ba:dd:6b:61:d1:ad:7a:6f:01:ca:d9:d6:92:0d:c9:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:E5:1C:C2:57:8E:23:85:03:E6:1F:8F:C6:98:2F:9A:A7:0A:83
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:2b:e6:42:5b:3c:ef:3c:d2:c0:f7:78:6e:cf:33:8d:84:d0:
ab:80:36:6d:4b:7f:10:7e:82:3d:c9:fc:e6:d1:63:df:7b:4c:
ec:35:73:47:0e:8f:33:20:70:34:71:a9:a9:8b:c6:04:25:d0:
a6:17:f6:34:a7:cf:2d:97:49:dc:47:43:34:ca:fd:50:0e:58:
a7:a0:79:f0:75:66:db:32:97:3e:37:56:10:56:a1:67:34:ef:
a1:2b:47:26:d3:82:82:46:ce:61:a3:7b:43:a6:8a:b3:b6:23:
5c:57:37:78:8a:90:d4:8c:30:21:71:6b:d1:07:07:9c:af:3a:
b8:9f:03:b1:c6:8f:90:fd:1e:11:02:26:a0:f1:20:39:6f:fa:
2e:63:03:fc:b3:c3:60:0f:40:24:02:08:dd:e6:fd:f3:55:b3:
72:3d:cb:fc:93:91:59:86:83:d7:91:f7:63:7a:39:7d:46:46:
ba:d5:4a:80:90:56:b1:c8:a1:6a:32:fa:0f:ec:2a:02:f8:7a:
27:ef:37:65:f2:7b:c6:04:a2:af:9d:28:74:23:fa:54:95:e6:
c9:03:e7:95:22:77:9b:68:c5:87:e7:de:da:28:e3:b6:78:23:
3c:d9:ca:39:f1:59:b4:a6:25:03:8b:5a:1a:bf:04:86:c7:35:
d3:4d:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:22 2025 by rpki-client