Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
File: 5F150B08D48611E9A4473984C4F9AE02.roa (raw, json)
Hash identifier: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=
Subject key identifier: 57:B0:0E:7F:25:EB:5F:24:C7:2D:C6:F4:DF:E3:26:1F:D5:10:E6:5D
Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Certificate serial: 1459
Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
Signing time: Sun 22 Dec 2024 16:54:50 +0000
ROA not before: Sun 22 Dec 2024 16:54:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38203
IP address blocks: 103.81.172.0/22 maxlen: 22
103.81.172.0/24 maxlen: 24
103.81.173.0/24 maxlen: 24
103.81.174.0/24 maxlen: 24
103.81.175.0/24 maxlen: 24
203.194.116.0/22 maxlen: 22
203.194.116.0/24 maxlen: 24
203.194.117.0/24 maxlen: 24
203.194.118.0/24 maxlen: 24
203.194.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5209 (0x1459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91499BB
Validity
Not Before: Dec 22 16:54:50 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768445a-fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:2f:c2:1b:ac:ab:e5:f4:e4:a9:58:32:aa:
c4:31:12:77:ce:e9:61:36:7a:0b:54:49:71:ff:c2:
7a:44:d7:cc:65:b7:ca:dc:5b:74:24:04:b1:ab:aa:
ae:26:bf:dd:d0:43:60:55:4a:2e:e2:6d:bd:f9:5d:
8e:a6:b4:ff:27:37:78:56:d9:6f:c5:aa:e2:12:c8:
c4:f7:62:78:ab:41:df:6c:e9:1d:40:92:2f:58:7b:
5e:ff:72:1d:a1:e6:f5:ea:a8:28:13:68:c0:c2:8b:
1b:a3:61:70:76:bd:2f:ca:17:01:b2:eb:ae:39:39:
a8:2d:e4:5c:45:a3:db:c8:d7:4e:d2:f7:71:7b:8b:
2f:77:71:a7:08:57:a2:10:22:15:b2:65:76:44:4a:
dc:e3:6e:87:e5:2f:ff:aa:70:03:a1:7d:7c:21:7a:
71:e6:b1:82:06:aa:9c:43:6a:47:ad:dc:b0:f5:19:
5c:98:9d:92:60:cd:95:e2:3f:df:17:48:d6:dc:b3:
f0:4d:8b:0a:90:df:26:8d:6c:cb:bc:01:b4:39:da:
4d:72:ac:17:68:29:34:53:66:c6:ad:0f:16:88:20:
0a:c4:05:84:2c:92:77:18:03:aa:c9:d0:c8:a5:bc:
dc:c6:43:91:11:49:83:39:7f:59:d2:1c:fb:9a:59:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:0E:7F:25:EB:5F:24:C7:2D:C6:F4:DF:E3:26:1F:D5:10:E6:5D
X509v3 Authority Key Identifier:
keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/5F150B08D48611E9A4473984C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.172.0/22
203.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:79:27:f0:61:e8:c7:b1:12:e7:d9:65:85:73:12:08:76:ea:
4a:56:eb:97:64:b6:16:f5:ac:29:59:7a:12:22:90:9a:1a:20:
24:1b:61:3b:da:e0:01:87:53:b7:4f:21:e0:41:6d:9e:fd:97:
c1:ec:3f:5d:5a:8c:a6:bb:c4:de:89:ad:71:74:28:3f:88:0b:
09:ce:6c:53:53:03:89:ec:2c:bb:b6:4e:42:bc:bf:20:02:a7:
1c:c6:5e:4b:b7:74:fe:c9:40:0a:ab:65:bc:03:15:39:03:71:
bd:a1:70:42:36:74:d1:bd:af:cd:fc:4f:6b:e9:b0:c3:69:d7:
69:93:6c:db:e8:92:5c:ae:e0:ed:2b:b8:c0:5f:aa:82:b2:60:
a6:26:9e:91:96:a4:72:25:6c:17:24:45:61:27:d7:1a:9c:40:
fc:d0:22:60:e4:99:9a:81:bc:cd:20:3e:ee:a8:23:23:eb:1d:
56:f5:0e:e5:1a:59:3d:18:77:aa:c7:5b:a3:9e:ae:59:c9:5a:
e3:b7:dd:7e:19:d6:73:bd:58:72:ff:82:06:48:ae:43:5b:5d:
64:aa:8b:d3:0a:cf:23:18:c9:e0:b9:fc:d2:b0:5c:92:01:0c:
10:59:24:44:ac:64:bf:13:3c:8d:48:05:aa:09:54:8d:0e:1f:
73:35:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:24 2025 by rpki-client