Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/95B7B784C1E611EF91316938C4F9AE02.roa
File: 95B7B784C1E611EF91316938C4F9AE02.roa (raw, json)
Hash identifier: cm0YB5uH01fcy9KoTmPs0S4MdfKYnPhYE5csvx6cWLM=
Subject key identifier: 14:44:4C:D1:45:AF:85:60:05:2D:CE:ED:6C:BA:70:1B:FB:A8:F9:28
Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial: 05A2
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/95B7B784C1E611EF91316938C4F9AE02.roa
Signing time: Tue 24 Dec 2024 11:02:37 +0000
ROA not before: Tue 24 Dec 2024 11:02:37 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.116.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA3F
Validity
Not Before: Dec 24 11:02:37 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=676a94cd-f38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:76:ba:67:79:fa:60:13:e2:ca:ca:0a:9d:
07:83:86:08:c1:85:39:4b:3d:fd:94:30:fb:b8:e7:
02:16:ac:26:28:c4:2b:67:d3:10:e3:65:ad:11:07:
ec:b9:92:bc:95:17:c4:cc:71:bd:f9:c4:e0:76:fc:
cf:53:fa:24:70:4b:93:59:0f:1d:18:51:05:b1:3b:
89:62:33:12:5a:04:13:e6:29:c5:4e:d9:28:49:00:
21:92:2c:ec:7f:a7:51:6b:22:43:a2:a3:71:54:1c:
82:14:0c:a4:d6:05:e0:89:c1:a1:7e:32:9b:e9:f4:
8a:bb:2c:9f:fc:94:1c:3e:5c:41:55:ca:ff:0e:6e:
a1:df:f7:35:d9:93:39:d9:fa:e0:7c:d1:14:e1:d9:
5e:b6:b8:97:e6:86:ed:2d:2b:bf:f4:3b:37:0a:74:
92:9c:53:27:8f:48:6a:fa:06:97:1e:3a:60:22:c1:
15:c6:bf:63:f8:df:ad:d0:1d:bc:52:d0:08:e8:cf:
8a:70:cf:97:87:fd:5b:12:b4:88:43:37:be:03:24:
5a:45:ec:5b:b2:67:01:d4:24:de:e0:1c:d1:14:15:
f4:fc:89:8f:3d:d7:61:dd:70:3c:6a:ba:01:06:fa:
75:85:89:cf:42:0e:5a:5a:6d:da:c0:2d:ca:0d:f5:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:4C:D1:45:AF:85:60:05:2D:CE:ED:6C:BA:70:1B:FB:A8:F9:28
X509v3 Authority Key Identifier:
keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/95B7B784C1E611EF91316938C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:6e:ad:ee:c2:bc:e8:05:b9:7b:37:0b:37:60:bb:ae:4b:66:
3f:45:84:1a:1c:fa:ef:4b:7c:95:cd:38:a6:1f:b2:7a:87:91:
4c:2e:81:54:fc:72:cc:5a:c8:d7:5e:62:6b:9e:d6:c7:2f:dc:
43:c8:c8:ec:c3:d1:51:b6:f2:b8:4e:94:d1:50:86:00:50:80:
bd:a7:9b:a0:3e:89:83:a9:c1:70:45:32:d1:dd:17:f2:0c:06:
d2:31:d2:3e:7c:82:8f:85:21:01:7e:9a:b4:35:5e:be:49:3c:
d8:5b:15:54:39:e3:43:48:fc:b3:ca:f1:e2:e0:b1:a7:c8:7b:
51:9d:68:c9:70:08:37:a1:b6:26:65:f7:b5:d0:8e:10:86:7f:
b3:4e:62:e5:23:a0:88:12:2e:14:53:9e:b7:a0:24:b4:d0:a6:
3b:02:a0:10:aa:01:4c:ba:ee:5d:d4:4b:28:47:f3:26:2a:42:
30:25:ab:5c:a6:e9:76:54:93:3e:2c:e2:1b:e4:2b:2c:8c:de:
42:99:e3:db:02:9b:df:5d:ea:a7:e4:1f:4f:0e:e0:82:2a:ee:
5d:3c:d3:88:16:de:0e:f5:25:bd:dd:7e:2d:cd:80:0a:0f:63:
3b:24:01:65:3b:33:46:e7:3b:e2:9e:25:f8:ab:1f:ca:26:d6:
61:ee:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:33 2025 by rpki-client