Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
File: 631D6D82F2B711EDAA29717AC4F9AE02.roa (raw, json)
Hash identifier: qWWNyKzcmb7NGh+jIMofc7R/HFDVXogw0r/eVAACwfs=
Subject key identifier: FE:77:6A:0B:DF:2C:27:AC:56:9B:72:87:68:A9:7F:7E:63:1E:3F:E3
Certificate issuer: /CN=A91579E2/serialNumber=3B62407E2E54F42F8090E2C0D86FD2C3A61330B3
Certificate serial: D3
Authority key identifier: 3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
Signing time: Fri 21 Jun 2024 05:07:18 +0000
ROA not before: Fri 21 Jun 2024 05:07:18 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 64095
IP address blocks: 103.133.88.0/23 maxlen: 24
2400:faa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91579E2
Validity
Not Before: Jun 21 05:07:18 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66750a86-eb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:b1:58:cd:4a:e7:37:68:89:67:e6:44:15:
bf:92:a2:1f:d4:1e:d4:79:60:e9:2e:84:82:f6:b2:
29:aa:2c:33:34:2e:e7:06:b5:9b:69:57:ea:22:3c:
db:e8:a0:c1:a6:8e:29:72:df:8a:ae:a1:55:1f:e1:
25:48:d7:f9:f1:a9:cb:b2:ec:f9:a8:c0:e3:5f:45:
31:89:e4:e0:62:72:dd:bc:cb:48:17:4d:30:13:51:
bb:c2:36:b8:75:ac:aa:43:77:81:a1:64:c4:45:e1:
de:23:b6:34:59:14:fa:cd:2f:6a:b5:ea:75:c3:1f:
5e:7c:f8:0b:54:a9:af:4f:e6:1a:5f:b6:8f:44:07:
18:dc:2f:e6:91:a6:35:e1:ac:2a:c8:e0:6e:6c:3e:
e2:1e:ad:f3:37:08:96:ab:30:50:32:72:2c:51:0b:
60:1e:19:c8:27:3c:3e:3d:93:28:60:a4:57:76:a6:
08:3f:c1:6c:e1:a6:06:84:6f:f5:17:f9:01:d0:8b:
ae:f5:0e:71:81:ca:b6:93:ac:41:e4:de:4c:e3:bb:
69:30:76:60:4e:c6:9a:6e:1a:44:df:e7:0f:a1:13:
46:5d:11:f8:82:bb:f0:f5:4b:82:96:6a:96:36:97:
6f:e9:f3:e1:0c:ad:43:f9:62:bd:41:52:9f:e2:79:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:6A:0B:DF:2C:27:AC:56:9B:72:87:68:A9:7F:7E:63:1E:3F:E3
X509v3 Authority Key Identifier:
keyid:3B:62:40:7E:2E:54:F4:2F:80:90:E2:C0:D8:6F:D2:C3:A6:13:30:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2JAfi5U9C-AkOLA2G_Sw6YTMLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91579E2/73AF2F7AF2B011EDA42B4470C4F9AE02/631D6D82F2B711EDAA29717AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.88.0/23
IPv6:
2400:faa0::/32
Signature Algorithm: sha256WithRSAEncryption
05:b0:74:1d:6d:43:45:cf:12:e9:c5:83:38:0b:e0:d4:93:48:
e3:36:60:b5:2a:c9:f2:1a:00:43:f2:25:f8:d9:b1:e8:10:2e:
d2:65:55:9e:52:e9:60:94:45:3d:3a:2b:d5:97:52:c2:bf:b1:
19:07:e8:89:87:59:4f:bc:d4:77:44:88:08:c2:23:2b:b7:82:
c0:60:d4:54:8f:02:b6:c3:b4:bb:66:b6:f5:7c:d0:71:91:ee:
49:f6:9c:63:70:68:69:25:89:bc:f6:94:6e:8f:86:90:a7:ee:
1d:66:b3:71:24:ba:1f:cb:f2:67:58:5b:3d:92:39:65:af:8d:
87:1d:78:0a:a7:51:8d:ef:5f:01:1f:2f:3d:fe:e2:d3:a0:2b:
3b:88:32:67:c0:9a:61:12:c6:30:1c:d8:d9:0c:ba:86:f3:45:
11:18:4d:e1:18:a8:1b:9a:0d:d7:87:a1:f5:b1:c7:f4:e3:ca:
44:0e:2f:0f:a3:21:b7:b4:71:2b:21:7c:30:69:2a:35:9c:5f:
30:65:ac:7b:5d:79:16:47:3f:5f:87:e1:ed:be:09:1b:a9:8a:
0f:cc:51:4f:89:94:e6:49:e1:2a:53:24:91:b2:47:5b:4b:b8:
f6:a3:f8:85:d0:34:b5:ec:70:b0:67:c0:7c:ce:ba:4a:ae:0b:
3e:0a:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:29:54 2025 by rpki-client