Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa
File: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (raw, json)
Hash identifier: cKlfuYUDNCiTcT5Td+UUCdnCR3fNSDenB6Jcxyfx2Hk=
Subject key identifier: 87:CB:01:65:9C:79:80:98:79:1B:88:6C:1F:63:93:B8:E4:C6:EA:83
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 06C2
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa
Signing time: Tue 10 Dec 2024 07:57:21 +0000
ROA not before: Tue 10 Dec 2024 07:57:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.226.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730 (0x6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Dec 10 07:57:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6757f461-c97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:46:4b:91:2c:b0:2c:21:47:dd:2e:2e:15:
a8:18:d3:43:27:5c:33:51:71:e1:a1:de:4f:2a:2d:
48:54:42:33:b2:0e:51:b2:c8:d6:5c:0e:a3:24:62:
d9:06:0d:77:89:64:9e:c1:af:39:5f:e9:ac:82:5c:
45:9a:82:f2:74:0e:f6:d5:fb:8a:fd:1e:46:58:2b:
2d:7f:25:04:ae:e5:fa:64:57:58:47:51:26:17:b8:
91:52:c3:ab:1a:fe:15:a9:bb:36:99:cf:6b:8f:79:
c2:b8:fe:01:5b:4f:db:58:90:f8:00:51:70:52:c1:
6f:2c:11:f4:6b:99:dc:57:77:f5:01:21:dd:d2:3e:
e8:a7:0d:c1:72:fb:59:c0:54:30:dc:0f:4d:46:9d:
f7:0d:ee:a1:75:98:13:08:fd:97:b6:4a:5b:98:45:
11:e4:71:c7:7c:b5:77:ee:e4:6e:03:b7:77:21:07:
e9:08:d5:c0:12:46:cf:fe:2b:05:3d:fc:38:e5:42:
86:63:69:fa:c8:53:2b:7c:1b:55:22:e3:dc:bd:6f:
4b:cb:f2:3d:b0:35:0d:ed:f7:3f:d4:d0:0a:08:93:
0a:6e:a2:60:06:3b:66:02:e3:91:08:b2:90:17:83:
26:65:bf:be:75:06:e9:af:87:cf:a9:8d:71:2f:52:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:01:65:9C:79:80:98:79:1B:88:6C:1F:63:93:B8:E4:C6:EA:83
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/62884F1AB6CC11EF84CBC45FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:82:51:5b:3b:8a:98:e2:03:8a:22:2a:a8:47:c9:df:c7:38:
b6:66:be:6d:2b:52:30:4a:f6:18:03:87:cc:46:7d:51:a0:69:
e8:bc:2e:20:3e:cf:d3:f5:1b:93:c0:80:0c:fe:d6:ab:07:a1:
d6:4a:4e:f3:af:73:20:4d:55:2c:bb:14:02:a7:20:88:fd:63:
89:b2:80:0b:61:08:0d:86:a5:6a:ba:bd:ef:cc:fa:ee:8a:a2:
b7:01:2a:fa:27:37:9a:d7:27:3c:4b:11:9d:f1:ed:aa:81:f6:
aa:a9:4b:3f:bf:b5:7e:47:5f:21:e3:a2:f0:0b:ee:dd:ac:8a:
33:f4:06:69:08:95:7a:85:68:2c:58:f3:58:49:42:79:a1:2e:
4d:d2:1c:79:55:5a:31:02:34:e4:e0:68:45:cb:f7:4c:a4:c1:
db:0b:6f:17:a1:7c:16:5a:2b:ca:47:24:c1:9c:cb:5f:e8:01:
ba:bd:2e:13:96:33:29:b2:0d:09:d4:05:1d:82:59:b6:bf:19:
c2:fb:58:19:b4:84:05:df:a2:50:9b:45:92:1b:5a:81:47:63:
7c:bd:fb:75:ca:82:02:cd:e3:46:db:5b:e1:c0:09:4c:56:c4:
dd:26:d0:b5:78:13:a9:86:36:4e:89:83:19:9b:89:a4:27:ef:
89:37:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:14 2025 by rpki-client