Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa
File: 881C3F9CABD311EFBFED7130C4F9AE02.roa (raw, json)
Hash identifier: zPUrUv1ZIaP+6eaUv+2E/NI861UxRFU1+jsH4LfcFNQ=
Subject key identifier: 1E:ED:C0:75:5E:BB:C3:A0:80:37:91:F2:AC:00:A5:74:31:95:78:DF
Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Certificate serial: 012E
Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa
Signing time: Tue 26 Nov 2024 08:50:48 +0000
ROA not before: Tue 26 Nov 2024 08:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139820
IP address blocks: 103.158.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7
Validity
Not Before: Nov 26 08:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67458be8-43a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:57:da:65:6a:5b:7f:2e:78:e8:cb:17:75:
cc:33:bd:2a:98:f0:09:7a:5f:ad:9a:22:a0:41:3e:
1e:ee:85:24:59:76:fd:65:25:7b:24:e3:df:0f:cb:
38:33:4b:c5:6c:44:93:1c:b9:c4:f2:67:a2:68:08:
29:91:dc:ee:57:ff:b6:63:20:fb:c8:c5:91:08:9d:
fb:64:4b:bd:78:09:1f:4b:ba:2c:6c:14:ad:a9:d9:
a6:6c:cb:7a:7d:98:aa:14:5e:25:5c:94:be:2f:65:
cb:63:58:f3:75:d9:6d:15:22:91:3f:4f:fb:4e:0f:
f4:1c:d2:42:fc:67:b9:70:7f:cd:0c:73:5b:eb:26:
24:c2:97:50:71:de:b6:7f:8c:1c:7b:4e:9d:2c:10:
e9:3a:67:52:03:f8:39:2a:c5:90:aa:09:65:88:82:
5b:ed:1c:f9:72:89:6f:e0:d0:a5:30:5e:4b:69:40:
39:f5:af:5b:78:c6:84:d7:78:fc:66:1a:99:3d:2a:
ac:22:d5:69:61:fc:95:90:bd:91:6c:8b:45:a7:65:
7f:07:91:d8:92:96:d2:d9:3b:40:9a:66:b2:88:77:
85:f6:fe:13:62:d7:a1:f0:73:61:9c:53:06:7e:62:
d5:0d:00:b4:d1:68:b3:34:a0:67:0e:cd:af:0a:ac:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:ED:C0:75:5E:BB:C3:A0:80:37:91:F2:AC:00:A5:74:31:95:78:DF
X509v3 Authority Key Identifier:
keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/881C3F9CABD311EFBFED7130C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.236.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4b:3d:96:1d:ff:69:96:71:e1:b2:60:24:68:dd:04:a8:5c:
63:3e:5f:e9:b3:0a:2a:fe:99:9c:f4:61:8f:e3:cd:23:8a:9e:
22:39:7e:c8:bb:b4:ef:ae:8c:72:27:1b:5b:3a:bf:36:14:43:
3f:7a:60:0e:af:35:75:c0:44:e7:75:91:25:92:1f:dc:53:ae:
8c:65:81:2d:02:1c:c4:8e:a6:88:63:7f:76:5b:4e:a7:f5:52:
07:f0:29:50:e9:7a:85:09:b9:63:4f:21:0a:bd:fe:be:f0:b8:
e5:5c:d8:3c:05:a6:4f:f4:b2:0e:1c:30:ac:3d:a7:b6:99:20:
98:85:81:d5:9c:07:b2:bc:db:c6:8a:6b:6a:48:96:6b:12:bc:
2b:d9:2b:dd:46:f0:db:ee:86:8f:99:ac:c5:e9:1a:2e:00:63:
d0:32:37:5a:f3:38:55:95:a6:e6:8d:a8:30:02:4a:cb:d3:9d:
88:69:e6:89:6e:b5:65:31:a5:ad:74:7e:48:19:9f:ba:31:5a:
4a:38:78:36:f6:5c:42:15:67:c7:24:56:a0:dd:3c:ca:fc:cb:
e7:47:53:12:6b:1b:fe:ac:a4:3f:e6:e2:ea:e3:29:89:87:60:
b4:5e:aa:a1:42:78:e2:0e:d8:de:c9:6a:8a:36:8f:97:c6:00:
29:58:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:10 2025 by rpki-client