Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
File: 22DA1C02131B11EC83377D59C4F9AE02.roa (raw, json)
Hash identifier: rWRqJhH4y787QjbpEE2hN3YZgixRs8J4MQqNG/pdZs8=
Subject key identifier: 99:AE:45:47:53:AF:0D:3D:41:DB:85:A5:1B:DE:36:68:CB:A3:A2:B4
Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial: 044D
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
Signing time: Sat 29 Jun 2024 02:13:50 +0000
ROA not before: Sat 29 Jun 2024 02:13:50 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 142295
IP address blocks: 103.167.158.0/24 maxlen: 24
103.167.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B11E
Validity
Not Before: Jun 29 02:13:50 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667f6dde-fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:c2:0e:91:40:63:c9:55:ca:fd:63:8a:34:
0e:1f:0c:37:85:93:a2:ef:c3:69:69:60:44:05:6b:
79:3b:68:31:73:0d:05:9c:22:94:b4:4d:b7:dd:4e:
0b:61:00:17:f6:61:52:d0:70:d6:47:72:3d:37:dc:
15:5e:cd:6e:f6:b3:21:19:73:d4:de:b6:3c:ae:59:
ee:b6:97:67:db:24:d7:64:11:ea:76:8d:19:20:10:
c3:c7:3d:dc:38:a0:ba:8c:aa:8c:29:03:ac:11:68:
fe:47:09:9d:72:fd:71:aa:92:8e:9a:89:e2:77:3b:
3d:f3:a8:a5:9b:55:04:9f:87:a6:62:35:fb:11:33:
5c:c9:16:74:d7:90:26:bb:49:ac:fc:4b:3d:35:ef:
23:2d:46:31:ea:cc:17:14:e6:8e:02:21:ec:db:cb:
e2:a5:90:1a:bb:80:56:85:a0:ba:1f:2f:04:f7:07:
f0:6d:9f:7a:14:f4:51:1e:a6:09:90:57:fc:8f:87:
0b:e6:8c:ac:a6:66:76:9e:81:b6:f4:57:32:0c:a4:
3a:d2:bf:05:57:2b:d1:7b:7d:92:74:98:bc:50:ef:
68:10:b5:1c:bc:6e:3d:ce:c2:16:9a:c9:d3:81:b9:
6a:ef:b3:cc:e3:b2:53:08:ef:79:99:be:f2:8c:68:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:45:47:53:AF:0D:3D:41:DB:85:A5:1B:DE:36:68:CB:A3:A2:B4
X509v3 Authority Key Identifier:
keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/22DA1C02131B11EC83377D59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:70:ed:7f:fe:b0:cf:6f:94:6c:d3:94:f7:3b:d2:3c:25:e6:
a4:b1:a3:71:45:5c:2b:f9:10:44:04:7c:43:93:07:b4:11:4a:
7c:2e:d0:92:cc:b2:79:d3:3a:bb:2a:56:32:e2:60:1b:12:2c:
99:c4:28:6f:7b:bb:d5:be:35:7c:34:ed:11:27:b6:54:b7:97:
fc:ec:ea:49:fd:ef:a9:00:2a:03:26:d4:49:87:8b:6a:a6:25:
17:41:a4:a0:20:63:fb:98:08:d5:ce:98:39:e2:8f:a0:f0:3b:
9e:d2:76:96:d8:a9:94:18:b3:cf:ba:d2:4b:01:3d:a3:a1:0e:
bd:85:55:7a:9f:1e:5c:75:05:aa:20:b7:11:4b:26:b4:e1:4f:
27:68:e4:d2:94:cb:82:bf:c4:90:7a:46:b9:c8:6a:9f:49:d7:
28:df:a5:fe:65:d4:75:a9:20:49:8f:d2:5e:07:0f:36:c4:ff:
cc:8d:62:32:f1:8c:e5:df:ce:54:1e:7b:bb:39:63:d7:84:29:
98:a5:3b:21:14:e8:6a:0e:65:89:b0:27:26:c1:83:32:5e:78:
cd:d6:83:34:74:b4:1d:7d:c2:2d:cb:2c:d2:44:3b:54:2f:ad:
4f:fc:b5:93:2d:8c:fa:12:47:ec:24:1d:1c:b7:a0:79:56:07:
d4:d6:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:06:59 2025 by rpki-client