Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
File: 6E98B3182D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier: lDaMLlKkOnOEtKB4HQw14YL4MByHOHikQc7Dy/TLNpg=
Subject key identifier: CC:30:23:44:28:26:9C:D4:E8:4C:3A:D5:0D:DD:08:0B:7A:2C:80:5A
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 0182
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
Signing time: Wed 03 Jul 2024 04:05:21 +0000
ROA not before: Wed 03 Jul 2024 04:05:21 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.10.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: Jul 3 04:05:21 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6684ce01-c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:79:11:09:9f:f1:fd:e8:63:e0:1e:b5:de:
2a:9a:6b:8e:13:9f:98:32:db:eb:3c:06:6a:d3:62:
b5:78:83:2b:b2:4f:ee:46:7e:98:df:27:e4:8c:a9:
88:4f:6f:ae:39:20:76:f1:ad:93:46:c1:ec:1f:7d:
42:4c:d4:d9:59:85:dc:6b:9a:8f:50:6b:a6:27:41:
f8:d3:c8:4b:95:6e:f0:dc:46:78:8d:68:6e:27:4d:
02:2a:84:67:4f:fe:66:b5:b7:4b:ae:12:86:3f:d9:
c6:64:5f:87:b2:95:70:04:a2:13:44:10:4f:a4:7b:
91:f2:0c:25:2d:4c:ff:c8:a5:6f:8b:15:a6:d9:d7:
0e:de:43:27:90:cf:c4:be:09:8d:15:c4:da:f2:a9:
dc:cd:89:a3:ba:11:b4:a8:a2:cf:ef:36:90:53:ce:
70:d8:ac:79:44:8d:c9:45:af:9a:3d:71:64:d4:0e:
f3:da:0d:19:e1:d7:76:29:6c:77:b2:a0:ee:0a:68:
ac:f0:3a:5f:50:f0:63:8d:8b:51:1c:52:72:fa:54:
3f:f6:b1:af:ba:c7:2f:92:ac:2f:17:ec:6e:6c:19:
36:12:e8:68:b4:8e:8b:d2:08:b4:6e:18:cf:08:e7:
69:d4:c9:46:98:76:d4:f9:7b:e2:77:12:c1:e9:b9:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:23:44:28:26:9C:D4:E8:4C:3A:D5:0D:DD:08:0B:7A:2C:80:5A
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b0:0b:91:c3:5a:9d:f4:16:e1:82:46:be:2d:e4:b9:67:0a:
cf:c3:7c:b1:c2:b5:ee:54:57:56:32:51:f5:69:e8:be:a6:20:
76:9c:86:09:2b:75:e3:9b:75:10:cd:22:b0:1d:a7:89:19:05:
c5:9b:73:0b:39:35:04:ae:9d:3b:40:29:f7:5f:fb:20:53:41:
c4:3d:19:fd:7b:8a:c4:3a:10:67:1e:38:b3:28:5d:c4:0e:61:
8d:bf:53:3a:b1:b7:82:68:65:e1:8d:cd:c0:ca:4b:85:48:34:
da:cf:8a:bd:ca:37:52:73:f9:84:ae:bc:6b:32:59:90:5a:a1:
a2:b3:72:68:1b:fb:cc:11:24:70:b2:56:11:db:51:da:0c:80:
d8:d4:93:34:a4:59:ee:fe:07:1a:66:06:62:82:8c:ab:f8:97:
f8:59:8d:ed:c3:d2:da:16:83:82:19:54:bd:ee:5a:d4:26:4f:
dd:6b:5d:52:31:dc:dc:00:84:14:76:4e:cd:9f:30:7f:16:11:
96:e5:1d:3b:bf:a8:38:f8:b7:70:d4:6b:5f:04:16:4e:af:21:
4c:64:fc:77:57:20:70:60:dd:60:28:c2:8f:f0:e3:81:de:8a:
2f:bb:f1:63:6b:3e:e0:c1:8b:3b:1e:e3:bc:93:4d:be:14:0c:
9e:f6:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:52 2025 by rpki-client