Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/2317D488646411EE97663926C4F9AE02.roa
File: 2317D488646411EE97663926C4F9AE02.roa (raw, json)
Hash identifier: 7RyeYB9H21csZ0u7Vm5eT233o7o+cmYvW/4hviBJFY0=
Subject key identifier: 23:A0:CF:3D:CE:13:EC:EF:3E:52:7E:74:38:99:CD:10:A7:87:BA:31
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 81
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/2317D488646411EE97663926C4F9AE02.roa
Signing time: Fri 06 Oct 2023 16:19:35 +0000
ROA not before: Fri 06 Oct 2023 16:19:35 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136516
IP address blocks: 103.82.94.0/23 maxlen: 23
103.82.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B
Validity
Not Before: Oct 6 16:19:35 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65203396-92d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:fb:38:d8:9f:b9:f6:dd:a3:ae:ef:9d:e8:
9f:d5:b9:0d:c9:c4:a1:7b:1a:9a:63:4e:78:6a:09:
ae:f2:7d:87:c1:3d:64:e6:b2:0d:ab:69:70:9b:79:
45:be:ac:ac:f7:83:4b:07:fe:11:33:50:a3:b7:5b:
96:d9:a9:14:59:26:33:48:fa:13:7b:42:36:f8:16:
75:a8:89:e0:f3:0d:9b:d5:9f:49:86:83:48:ab:34:
9f:53:07:86:bf:c4:36:bb:fc:0f:d3:17:a3:30:6a:
96:a1:a5:81:f9:23:90:82:18:b7:72:1a:26:26:1e:
69:4a:28:f1:f0:80:fa:69:9d:0b:22:7a:3b:8e:e7:
cb:6e:9f:ce:18:28:a1:96:d0:48:1b:b4:55:e2:ea:
c4:88:d4:24:93:f1:6e:3a:b2:e9:c3:e5:10:f3:6c:
1b:21:49:d8:5c:b9:6a:08:9f:2c:90:14:45:d4:a4:
9f:1f:06:09:70:0e:a4:c4:be:1b:8e:a6:ce:46:33:
94:3b:38:2e:21:2b:e0:ca:6c:4f:7e:a9:64:47:54:
e9:b4:5b:1d:4a:82:4e:61:fe:c6:79:b0:65:74:f4:
8f:8e:6e:0f:e2:d0:7f:70:af:6c:80:c5:0c:e5:1d:
a7:09:31:ae:50:a7:4e:b7:69:76:69:fd:26:2f:52:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:CF:3D:CE:13:EC:EF:3E:52:7E:74:38:99:CD:10:A7:87:BA:31
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/2317D488646411EE97663926C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.94.0/23
Signature Algorithm: sha256WithRSAEncryption
68:75:b4:60:8f:de:2b:00:ea:1a:ca:82:30:55:6b:ba:c2:ed:
f5:24:e4:80:4a:a1:ce:cb:35:32:a3:10:f2:9a:6a:fc:98:36:
d7:e7:7b:2c:70:b7:d5:47:8f:70:07:48:49:18:00:75:89:e2:
3e:e1:6d:2e:43:57:05:31:6b:90:85:6d:8e:36:62:cf:88:2e:
86:82:39:2e:ba:9b:a2:a4:66:14:71:07:89:cb:50:77:0b:70:
09:c1:43:03:7f:3c:e8:53:fb:38:c8:31:06:fc:38:a1:3c:08:
f5:69:c6:c7:50:a9:08:d7:b2:16:d6:76:6d:f5:57:43:b6:12:
7f:22:31:b7:27:27:b3:8b:ce:e7:62:98:c2:5d:f7:9e:e6:e1:
59:67:95:52:05:6f:99:b8:37:0d:81:67:d4:a0:d7:24:6f:3e:
93:02:2b:67:7f:c3:45:f9:77:3e:27:f1:65:98:69:7f:23:ab:
31:b2:c7:78:0f:62:b5:37:80:34:03:48:2b:a7:1e:f6:6c:e7:
c9:d4:56:06:7a:53:8c:9a:b9:c1:b6:90:a9:74:15:53:12:1e:
ec:c6:94:57:44:69:d6:f1:f3:fb:07:74:0f:86:ed:10:51:31:
b2:96:be:cf:1f:fc:47:fc:88:85:8d:66:9b:e0:b0:37:4b:cc:
e5:21:ed:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:22:42 2025 by rpki-client