Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/38350408C9F311EF85CBE171C4F9AE02.roa
File: 38350408C9F311EF85CBE171C4F9AE02.roa (raw, json)
Hash identifier: Jd/VX6pXAFq/T9/1qNa3hEeQo1w9VptUMpnPr4EUdGU=
Subject key identifier: 02:9A:50:F9:BE:EF:25:2C:40:34:33:F7:2D:5A:75:8B:FB:14:D4:3C
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 02C6
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/38350408C9F311EF85CBE171C4F9AE02.roa
Signing time: Fri 03 Jan 2025 16:53:13 +0000
ROA not before: Fri 03 Jan 2025 16:53:13 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 64445
IP address blocks: 103.189.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B
Validity
Not Before: Jan 3 16:53:13 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=677815f9-b496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:7d:8c:3a:9c:64:0c:74:a0:e6:77:01:62:
4b:ac:41:50:b6:c0:d4:eb:1c:b7:69:42:db:21:99:
ef:cb:6a:47:5b:42:01:80:51:aa:49:ba:a1:f1:85:
69:08:f8:47:a2:4b:47:a4:1c:ec:17:86:21:2b:f7:
2c:00:4f:4f:53:fc:17:b5:23:13:12:89:76:70:77:
13:5f:8d:30:3c:25:c8:15:2f:a7:aa:e6:46:dc:23:
8c:b1:85:cb:74:39:56:d3:8c:b3:da:a4:9b:23:fb:
ac:82:90:c4:a5:47:6b:72:a7:34:b2:ea:62:b9:64:
81:c4:b8:fe:67:74:69:39:79:be:6a:2f:02:23:41:
83:ab:31:af:58:62:8c:26:bf:42:d3:7c:36:8d:5e:
00:34:ae:a1:6a:64:45:53:2a:4e:82:65:77:17:f0:
82:36:6a:c3:f6:42:71:0c:b1:ed:63:ea:7c:05:70:
12:ff:f1:d4:b6:82:90:08:5a:0a:44:96:8b:d1:bd:
6a:f6:62:42:92:c1:2e:d6:fa:78:fd:43:df:4e:9b:
08:df:31:bb:48:5e:e3:70:74:f6:2f:1a:b0:07:dd:
4a:bb:b2:34:be:76:74:cd:7a:2d:bb:c3:9b:10:d4:
2c:21:06:bd:e9:bd:a8:77:77:b8:62:a3:34:5b:db:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:50:F9:BE:EF:25:2C:40:34:33:F7:2D:5A:75:8B:FB:14:D4:3C
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/38350408C9F311EF85CBE171C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.191.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f3:81:95:f9:03:18:d5:a9:aa:d0:ff:fb:a1:cf:91:c7:51:
3d:18:c4:55:c7:4c:11:c5:a7:cf:20:2a:e1:b8:54:c1:03:08:
f7:71:3f:7c:31:9a:ce:19:4a:b8:72:86:48:f6:03:4b:8b:21:
a8:a4:cb:47:eb:4c:2a:04:2b:c7:e8:ea:ec:06:1c:17:d0:85:
ab:aa:74:6c:c9:f7:08:56:73:a9:4c:03:6c:77:d2:58:72:f0:
e1:7b:5f:11:e8:bc:41:0e:e5:12:a4:b6:6c:4e:67:6c:e5:d8:
ac:38:c5:bd:5d:5d:45:6d:56:1c:75:e9:85:5e:e2:f3:47:55:
81:49:c6:3e:1e:b8:25:64:92:12:8c:37:be:09:25:87:16:7c:
b1:80:33:8f:85:e6:b0:37:22:66:a4:ca:de:c7:11:d6:39:b9:
12:22:e0:48:06:bf:f2:4c:03:a3:44:c2:29:4f:36:5c:00:c4:
e3:9b:96:6b:4a:c2:f3:d5:55:d7:d1:68:5e:61:8b:fb:3d:ca:
35:5c:09:c9:26:41:d1:9d:10:9e:dc:4f:8d:94:c1:74:ff:32:
51:4f:17:07:8f:6a:53:c0:42:55:4a:af:2b:6e:8e:e2:5f:1c:
8f:08:1a:81:ea:c2:ec:f0:a2:3b:bc:e1:6e:4f:76:f4:33:ac:
96:09:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:56 2025 by rpki-client