Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa
File: C1C296F45A7111EBB1700884C4F9AE02.roa (raw, json)
Hash identifier: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=
Subject key identifier: 40:07:FC:59:38:F9:8E:AF:BB:84:DE:C5:1B:41:B9:93:C2:7F:96:C5
Certificate issuer: /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial: 0687
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa
Signing time: Wed 18 Dec 2024 22:11:54 +0000
ROA not before: Wed 18 Dec 2024 22:11:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.159.71.0/24 maxlen: 24
103.174.251.0/24 maxlen: 24
2001:df5:7880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91518AF
Validity
Not Before: Dec 18 22:11:54 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676348aa-5730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:ec:1f:41:ed:6c:34:42:d3:89:2d:d3:b3:
e0:cc:a8:58:44:30:ff:30:df:1f:f5:30:27:82:7d:
e9:40:03:07:ae:eb:2d:cf:8b:8a:a5:32:21:83:80:
02:72:81:f3:8f:03:6c:fa:27:f2:2f:62:04:5e:00:
71:cc:87:c7:7e:f0:e8:3c:16:fa:8f:86:90:9e:62:
b1:da:86:e7:08:a7:8b:d7:d0:dd:89:61:43:42:26:
68:ba:55:76:9b:9e:2a:2a:ad:b2:16:5e:26:9f:29:
0b:3c:c0:a4:27:e5:41:d2:6c:6b:5c:59:ac:72:1d:
c5:6b:9f:50:29:bf:25:72:c0:a8:0b:a9:ff:31:e7:
2a:e9:1d:0e:df:67:38:06:2a:6b:ed:ad:e4:0e:b2:
96:b9:2b:94:18:0a:05:04:68:20:f2:4a:cd:fc:46:
5f:d6:d0:8d:46:d2:d1:1e:fc:49:ce:83:f1:f7:ea:
20:01:dc:c2:f9:63:a1:3f:73:de:29:7f:e5:c0:d7:
d6:9f:b3:65:a2:b7:89:cb:76:db:bc:00:7b:df:ae:
33:da:89:9d:98:09:f7:28:bd:57:7f:71:cb:57:90:
30:95:22:9c:53:1b:96:44:82:df:da:a5:05:fd:a1:
45:77:58:9c:82:96:02:e1:c0:72:dc:cb:96:52:bc:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:FC:59:38:F9:8E:AF:BB:84:DE:C5:1B:41:B9:93:C2:7F:96:C5
X509v3 Authority Key Identifier:
keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/C1C296F45A7111EBB1700884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.71.0/24
103.174.251.0/24
IPv6:
2001:df5:7880::/48
Signature Algorithm: sha256WithRSAEncryption
af:93:e6:63:7e:e4:b1:e9:79:3b:fd:51:6f:c2:10:49:bb:2f:
3a:2c:0a:49:f6:3a:67:6a:68:9c:a0:15:d8:eb:72:c1:b3:77:
9f:4c:e5:de:81:f8:ce:dd:5a:50:f3:0c:ad:3a:63:2a:90:3e:
41:20:51:0c:2f:2c:88:a7:eb:5a:3e:de:b8:ea:db:65:34:32:
0e:c9:44:5d:e2:dd:0a:6c:3d:e5:df:49:ac:f3:5f:f4:10:f8:
45:ac:10:68:43:12:a3:81:42:88:9f:2b:96:06:d1:7e:e1:f0:
9c:2b:9f:d8:cd:13:99:66:a6:55:56:8f:9b:99:0e:d6:95:2d:
69:cf:ab:db:11:d1:e3:d4:e8:9a:d5:2a:61:37:a8:b9:3d:88:
c1:42:86:30:40:e6:e9:68:1c:77:81:c9:7a:37:21:ab:b4:06:
79:87:5f:77:e9:d1:b1:e7:ce:6f:fd:f5:3f:01:08:89:dc:19:
6d:e7:98:83:3c:3c:f4:7e:f0:f1:1e:a7:4e:b7:69:38:05:b0:
65:6d:55:9a:a5:64:d2:d6:75:68:10:95:02:ed:fc:ce:5d:aa:
11:5e:bf:83:dc:36:16:5a:56:42:79:44:c9:fa:95:27:57:69:
c0:a1:84:f2:30:29:ff:8f:7c:1b:67:43:53:eb:aa:52:0b:45:
e5:a7:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:16:20 2025 by rpki-client