Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/85C30A62911011ED8A6D0A2DC4F9AE02.roa
File: 85C30A62911011ED8A6D0A2DC4F9AE02.roa (raw, json)
Hash identifier: In1iaiGZptAeSoXWSOanGq9uSetLhfFvRs5cUATJvis=
Subject key identifier: B3:69:EC:97:35:07:A1:92:9B:1E:21:38:59:DF:27:EE:93:AF:7C:21
Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial: 0603
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/85C30A62911011ED8A6D0A2DC4F9AE02.roa
Signing time: Tue 10 Jan 2023 17:59:27 +0000
ROA not before: Tue 10 Jan 2023 17:59:27 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 134450
IP address blocks: 103.156.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1539 (0x603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE88
Validity
Not Before: Jan 10 17:59:27 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63bda77f-4cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:f9:c0:a1:19:03:14:8c:0e:62:1f:25:f1:
5d:e1:66:71:c7:c1:77:c8:81:1c:14:0f:a0:04:f4:
dd:2c:f0:4f:71:8c:51:fd:e3:df:4f:37:7a:b7:03:
b4:f7:a2:25:2a:c1:76:a8:3a:62:95:f0:44:c6:80:
76:6c:46:07:42:02:95:d1:da:d2:14:aa:41:b2:0e:
1b:b1:78:cd:e5:f5:a9:2e:29:c1:2a:7b:7f:80:cc:
72:9f:ad:b3:8f:74:ef:27:7a:b8:d0:62:58:37:91:
ef:ed:23:92:b8:d1:47:0a:d2:63:40:f9:51:65:43:
ed:95:65:1a:3f:db:1b:bf:89:bb:cd:9b:8b:2c:ed:
6b:44:08:74:72:84:9e:ea:62:8b:bb:2c:6a:eb:95:
7d:8a:c9:8b:84:a1:89:d8:49:ed:26:7a:54:e3:4a:
bc:e3:8e:7a:a3:0a:d1:53:21:b6:32:99:f0:f0:93:
4c:3b:8b:52:09:b4:9f:8a:b4:de:91:fc:b3:ba:43:
2c:76:7e:60:2d:5f:00:56:95:08:65:f3:8e:a5:c5:
fb:c2:a8:af:d2:90:12:3e:e5:02:82:13:a3:18:fb:
c3:1e:ed:21:a0:2a:8f:13:88:ce:12:40:6e:b3:5a:
38:6d:98:f3:06:1f:1d:f8:7c:f3:47:28:6e:0b:83:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:EC:97:35:07:A1:92:9B:1E:21:38:59:DF:27:EE:93:AF:7C:21
X509v3 Authority Key Identifier:
keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/85C30A62911011ED8A6D0A2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.50.0/23
Signature Algorithm: sha256WithRSAEncryption
26:7f:84:38:44:2a:39:2a:3f:c4:1f:c5:57:74:ed:e0:47:a0:
3f:5f:bc:5b:d6:d8:90:b9:62:7e:94:48:fe:ff:81:c0:ea:18:
f4:b9:7b:e4:26:34:d0:b6:d2:7a:66:a7:71:ce:cf:d4:5c:d8:
f1:12:fb:cf:a1:82:74:a5:f4:1f:7b:12:11:3e:10:19:b4:68:
b0:1e:c6:b2:1c:ff:85:29:c4:2a:11:cb:99:ee:05:39:22:35:
ab:80:5b:de:ea:6e:9c:4c:96:a1:4e:e4:19:72:9b:e6:b6:b6:
8f:f7:ed:0e:b2:fd:81:39:02:de:0a:55:40:1f:d8:ee:7e:c1:
d8:dd:09:89:9c:0a:2b:f8:4c:1d:d0:93:b5:57:f7:e7:11:8d:
8f:13:23:7c:3e:6c:eb:39:89:47:8c:3f:bc:f2:08:03:90:22:
11:f4:ea:45:0b:3e:a4:6b:19:9e:af:34:6e:ce:d9:b7:06:07:
bf:99:fc:66:a2:a0:a8:cc:22:72:63:ff:5f:ee:87:8b:21:6e:
8c:a4:76:e6:15:5b:8d:5d:46:10:49:31:bd:03:dd:9d:c8:3d:
07:ec:8f:b4:07:7c:72:5c:aa:fc:07:a6:03:79:6a:4d:5e:55:
4e:2f:53:ed:62:5d:72:98:c9:c1:55:11:4e:c8:c3:72:72:30:
b5:23:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:55:03 2025 by rpki-client