Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
File: 55C580C2108411EDB5AE6333C4F9AE02.roa (raw, json)
Hash identifier: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=
Subject key identifier: BA:F2:CD:B9:89:D5:51:EB:6C:61:74:A2:67:CF:17:76:FF:63:53:83
Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial: 01CC
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:44:58 +0000
ROA not before: Wed 03 Jul 2024 03:44:58 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133929
IP address blocks: 103.169.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915430A
Validity
Not Before: Jul 3 03:44:58 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684c93a-8f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:92:a4:9d:7d:06:df:7b:fc:d0:15:af:1a:
8c:76:2c:fe:bc:19:25:d0:cb:a1:a6:35:db:30:a9:
16:9a:2b:0e:35:d7:c0:bd:f4:a6:3b:b1:64:0f:d6:
c3:65:c8:8a:f6:f5:3f:44:29:e0:65:41:f2:fc:59:
e7:89:d0:c0:1e:b3:70:cc:a8:66:13:dd:33:ce:e8:
9f:10:9b:bc:30:e0:8f:09:05:0e:f1:85:0f:c0:f1:
79:38:23:0e:04:26:23:b7:fa:49:36:c8:a4:39:79:
97:b5:62:92:dd:40:70:5c:83:a5:62:b6:55:17:64:
cd:68:53:21:c1:5a:bb:cd:4a:43:75:15:44:7e:86:
73:1f:d6:fe:bd:90:9e:d3:44:a3:f6:2b:d6:e2:6a:
86:d4:cc:a7:13:bc:53:e5:37:37:ae:ce:1a:99:c9:
a7:11:36:5e:09:ec:3d:bc:b3:9e:af:00:60:68:04:
8c:25:d5:b8:01:9f:2f:01:1c:f4:25:91:35:b8:a9:
89:09:1c:62:17:3e:f8:75:59:a6:be:6f:14:ee:ed:
c0:81:f7:82:34:e6:86:eb:59:8b:34:d5:17:e6:8e:
37:7f:d9:5e:1e:8e:c4:bb:be:71:84:d2:22:17:3d:
c9:ce:fa:39:3e:17:c4:1f:8f:e5:9b:2a:c3:e1:2b:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:CD:B9:89:D5:51:EB:6C:61:74:A2:67:CF:17:76:FF:63:53:83
X509v3 Authority Key Identifier:
keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.96.0/23
Signature Algorithm: sha256WithRSAEncryption
27:3d:e2:91:cb:c1:8d:a8:18:03:aa:7b:b0:56:90:d0:16:37:
00:40:93:fa:b0:bf:ea:c5:2f:4d:53:21:21:2c:80:f7:4b:d1:
1f:cc:8f:3e:56:70:61:f7:92:74:66:07:9d:b3:09:4e:54:9b:
b6:1a:08:b4:57:8b:63:ed:a2:8f:ea:9f:4e:46:17:82:ba:d5:
ee:8f:2b:2a:b1:06:a3:3c:35:80:fb:e7:8f:c7:69:39:e8:b5:
68:06:de:ed:da:40:b4:fd:c4:1b:dc:5a:15:ef:b7:35:4f:bd:
96:80:b7:c7:28:bc:ab:c3:f7:03:d5:f3:94:fb:17:b8:f5:88:
5b:03:ae:0c:6d:b8:0f:d7:9a:e5:fa:4f:b9:47:fb:0a:91:54:
dd:25:40:f5:14:14:22:ae:7d:77:a4:73:51:fe:90:46:e6:60:
a0:16:26:50:3d:10:88:18:1d:c3:13:57:9a:ca:27:4d:65:d8:
94:56:1c:40:2a:67:90:b5:d5:3d:1f:b7:7f:32:e3:ca:04:8b:
0c:68:b7:06:ff:8b:08:e5:04:9b:c9:67:bf:96:b8:27:f3:bd:
e4:a3:dd:f5:b8:16:50:a6:b3:dc:b2:f1:76:b7:59:25:8a:bd:
31:43:54:18:93:73:1a:14:a3:59:5a:41:2d:15:ff:8b:c9:21:
2f:2c:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:35 2025 by rpki-client