Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
File: 78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (raw, json)
Hash identifier: hEiN61azCzCVDsRROVBC0HW2s55XG0VY8MhC1abTRg8=
Subject key identifier: 08:E9:F7:F1:EE:7E:BD:4D:5B:1C:C5:F1:94:16:CA:2A:75:C3:2C:FA
Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial: 05CD
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
Signing time: Sat 06 Jul 2024 23:51:18 +0000
ROA not before: Sat 06 Jul 2024 23:51:18 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55550
IP address blocks: 103.115.100.0/24 maxlen: 24
2402:e4c0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Validity
Not Before: Jul 6 23:51:18 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6689d876-14dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:58:37:5d:fa:c5:66:c1:7f:5e:e1:1a:aa:
70:ec:19:80:f4:30:b2:a0:76:39:58:42:87:e8:3b:
83:34:f6:d5:21:97:71:5c:e5:0f:9b:e5:90:3d:e4:
ab:40:72:d5:6e:6e:5c:84:ae:ae:07:28:dc:a9:34:
1c:02:ae:3d:42:de:cc:4e:1d:dd:a2:d5:b4:ae:cf:
67:5f:ec:0b:0e:34:34:95:cc:ee:d8:10:fc:1a:77:
91:a6:aa:b0:23:42:84:e0:2b:95:72:c4:b6:5e:84:
4d:0e:2e:fe:c4:6d:c0:60:2b:ea:0d:f7:81:8e:e2:
6a:6e:41:d5:fd:bd:23:b7:48:e3:a1:64:ca:fc:48:
4d:6a:71:5c:3e:c0:22:60:38:b1:52:7f:3c:0a:57:
cc:57:ee:af:39:50:eb:39:76:ec:6a:ab:79:ab:84:
ae:66:41:83:60:b8:d5:5e:19:2b:06:38:47:20:55:
10:2b:50:a4:08:d1:37:d9:64:95:2b:5b:a1:8f:3c:
38:dc:d1:00:79:6d:20:81:98:de:b6:71:a4:05:19:
c7:09:c4:ac:66:80:a1:92:ac:c0:78:a9:1d:9b:f1:
90:b8:68:9e:c2:49:9b:e5:06:9e:51:50:03:f8:c0:
01:42:0c:15:75:3c:2e:50:36:16:8c:32:34:e9:4d:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:F7:F1:EE:7E:BD:4D:5B:1C:C5:F1:94:16:CA:2A:75:C3:2C:FA
X509v3 Authority Key Identifier:
keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.100.0/24
IPv6:
2402:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:e6:81:0d:d3:76:60:66:d9:92:fb:6a:63:c6:35:70:8e:25:
90:78:2a:ac:e1:40:06:54:53:ec:16:33:a9:51:17:fc:6f:dd:
2c:ef:2f:49:3f:42:29:e0:c9:5c:8b:e7:99:30:a0:32:c9:9a:
cf:63:88:55:9f:32:e5:ae:20:b8:a0:59:e2:c7:c8:bd:e2:ef:
5f:2e:8a:f4:b0:0f:e0:7e:ab:45:0c:eb:19:65:cb:3c:51:78:
aa:92:76:8b:e6:98:b5:09:3e:10:be:8a:a0:0c:fd:85:30:c0:
92:a7:44:27:b0:9c:9c:c1:e9:22:dc:a8:27:bc:f7:50:0e:dd:
c2:be:e9:75:4b:22:b1:f6:78:35:8d:d9:70:f4:72:41:d9:ca:
57:2d:2e:9e:6d:db:ed:63:9c:0d:62:a8:df:1a:15:37:b9:db:
6d:3c:18:fc:c9:8c:6a:92:ab:2b:65:5e:86:e9:1f:6e:c3:a2:
23:68:03:d2:7e:ce:03:65:53:55:b3:33:b3:53:e2:f6:6d:c3:
84:c3:08:86:88:ca:8e:03:a2:99:14:90:24:14:64:5e:ea:01:
58:60:d5:2d:a4:00:54:50:d6:36:04:e7:73:ad:a9:71:b6:a3:
12:fd:c8:45:cf:b6:0d:d3:08:91:c7:e7:ab:83:05:61:3a:4c:
52:c4:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:49 2025 by rpki-client