Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
File: 9787989A777011E7BF7EED10C4F9AE02.roa (raw, json)
Hash identifier: y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=
Subject key identifier: 70:3F:49:5B:90:BA:F9:53:C4:7E:BF:A9:B0:62:86:C6:E2:36:18:F9
Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial: 18CC
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
Signing time: Wed 14 Aug 2024 16:53:53 +0000
ROA not before: Wed 14 Aug 2024 16:53:53 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136801
IP address blocks: 103.95.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6348 (0x18cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187313
Validity
Not Before: Aug 14 16:53:53 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bce121-6e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:f9:d6:eb:de:5d:ff:90:d6:73:29:c2:a9:
e5:dd:4b:00:d7:a1:c4:b3:65:19:f3:a1:b0:c8:ac:
70:82:ce:84:4e:25:9d:1a:e2:88:9b:fc:0c:50:51:
8c:9b:ef:88:3a:20:9a:62:b4:28:de:f3:f2:b2:0e:
5a:9d:67:fe:b8:c5:29:96:40:5c:c6:8a:aa:60:ff:
ac:55:db:a3:29:9a:45:9d:6b:bd:c8:09:c8:f2:fd:
0e:ba:96:5b:7d:0b:47:1c:b7:1f:ba:cb:3f:a2:7d:
07:9e:64:ca:11:7c:ff:50:3c:e1:ab:07:f6:c6:a9:
9a:5e:c2:96:d0:c0:17:f1:8e:24:45:78:d0:77:b9:
4a:1c:bd:7d:59:f5:4d:e3:f1:a8:9c:7a:b0:ba:fb:
02:2e:94:e4:5b:d4:7f:f5:1b:dc:fd:ec:90:9b:e0:
4c:21:75:07:e5:7a:8d:95:83:b0:2d:3d:94:18:69:
f4:ad:68:c8:9a:a3:6b:60:95:3f:4a:18:89:f6:af:
8a:41:2a:fc:b7:4c:48:01:43:67:0a:63:0c:8b:44:
4c:22:1e:14:8e:80:59:bc:91:6d:4b:a3:8e:8c:8b:
12:4f:3f:b0:6c:98:55:22:a3:d1:b3:b0:9f:0d:8b:
63:d7:8b:7e:75:00:84:82:1b:f6:aa:aa:06:89:8d:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:49:5B:90:BA:F9:53:C4:7E:BF:A9:B0:62:86:C6:E2:36:18:F9
X509v3 Authority Key Identifier:
keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/9787989A777011E7BF7EED10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:df:90:b5:eb:54:f4:15:10:e1:57:24:39:98:e0:24:17:1b:
69:1f:0e:4e:94:64:7a:88:f3:9c:1e:55:08:1b:5c:d2:3b:69:
c8:07:15:50:46:0d:a1:2e:38:38:1e:51:57:03:09:4d:b0:9a:
b3:24:f5:85:3b:38:3d:3b:d2:a4:7e:60:3c:96:d4:e9:07:f8:
5c:53:6d:36:c5:0a:58:3d:76:ad:9b:c4:52:d3:8f:3f:12:45:
df:89:88:84:74:e2:41:82:86:9d:a4:34:90:94:52:94:cb:15:
11:bb:8d:20:15:4f:80:fc:b0:43:a5:bd:72:04:9c:e4:2c:31:
34:4b:2b:03:e0:09:88:49:47:90:7e:ad:b6:1e:d6:32:ac:16:
6f:97:f4:d0:51:75:d3:a6:aa:6c:9c:60:4c:67:5d:37:31:41:
07:2a:94:fb:a8:bc:2a:6e:44:bd:34:81:ff:9e:7f:43:72:12:
f6:9d:73:ec:03:a1:65:de:69:76:c9:30:83:6e:90:e9:5f:69:
fa:d7:77:14:d4:2d:ac:da:1d:2a:9f:96:17:b2:53:9a:33:cc:
de:fd:97:dc:e0:af:14:71:4e:82:b8:77:e8:bd:d5:86:fb:e8:
e1:cc:5c:f8:f7:b5:b9:da:10:25:e8:27:9d:fc:af:62:a0:bb:
0e:1e:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:43 2025 by rpki-client