Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
File: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (raw, json)
Hash identifier: KcabN84FuC1RCZKB2biZEnUyMb0N5RBlFWlu2grfP8Y=
Subject key identifier: 9A:F1:77:DD:1B:DC:41:6D:CD:59:5E:AD:2C:4F:41:20:0F:DD:D4:F6
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 0855
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
Signing time: Sun 22 Dec 2024 20:28:45 +0000
ROA not before: Sun 22 Dec 2024 20:28:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 21859
IP address blocks: 103.146.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F
Validity
Not Before: Dec 22 20:28:45 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768767d-def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:08:89:be:27:f5:68:08:16:85:0d:d7:b5:
1f:a1:3e:0d:df:90:b5:cb:e5:d6:03:b1:00:f1:6e:
5d:f9:68:51:ce:01:f1:29:b0:c0:62:58:84:9f:7f:
7c:6a:fc:9e:97:1d:82:f8:d3:d6:6f:cd:d9:dd:40:
00:52:bf:29:2e:57:47:15:74:14:c9:b6:ce:19:d0:
80:8d:6a:85:b6:1c:c9:a0:e8:f9:1f:1b:e8:02:09:
af:e7:43:43:91:fb:af:e8:54:f8:6d:ee:b2:1d:78:
10:25:64:60:0a:f1:fd:87:e1:a7:65:ef:4a:b9:10:
43:d8:8d:b7:ce:29:d2:ba:03:70:8b:1c:a8:0f:08:
e5:13:30:fe:f2:41:2f:d6:3c:ed:a7:73:a2:76:61:
79:4b:dc:d6:c3:12:e6:6f:48:f3:4a:16:f6:50:98:
ab:94:bd:ca:6e:e3:a7:7f:84:aa:82:25:19:e0:c1:
5a:d0:1a:64:ae:8a:c9:a3:72:40:7b:f3:b3:21:2e:
14:59:34:e0:ef:23:01:9b:82:f7:b7:20:c6:0c:d3:
3c:32:09:86:61:6e:8a:a5:6e:2c:41:fe:80:00:2f:
81:ac:a0:f8:e6:4a:39:fc:0d:05:93:28:0c:6d:ff:
cf:fc:4d:5d:38:e3:91:5f:ff:9f:56:40:9b:76:16:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:77:DD:1B:DC:41:6D:CD:59:5E:AD:2C:4F:41:20:0F:DD:D4:F6
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/38B92F54E17D11EDBCAFC081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d3:c3:89:f7:af:ec:f4:ad:b7:af:b0:a3:92:2c:ed:d3:52:
ef:0d:aa:20:92:c8:91:de:26:b7:9e:1e:87:18:d3:37:33:d6:
6a:45:ef:68:10:97:f1:c3:ff:39:52:17:45:c0:6e:a3:c6:c3:
78:5f:4d:bd:76:24:59:42:dd:9f:b6:81:54:ea:da:7a:08:9e:
75:96:d3:58:cd:d8:c9:e6:59:21:ec:aa:f8:84:5c:a4:bf:f0:
a2:34:58:0c:38:ab:e3:42:c5:96:96:d5:a1:18:e1:97:bb:91:
5c:6f:a6:57:42:c2:a9:a5:c2:6f:bc:04:51:53:3e:74:6d:02:
a2:48:52:d8:e5:f7:6b:32:22:40:c1:cf:9b:03:91:26:1c:db:
d9:5e:dd:b4:f1:53:8d:6c:16:f3:b4:8b:ca:2f:0a:3e:c3:46:
55:30:9b:23:89:dd:d5:cf:09:23:ef:c0:52:e3:00:2e:c0:c6:
61:d7:4e:4b:a7:a6:57:1d:72:fd:c7:05:1e:85:91:8c:f3:e7:
18:4e:f2:54:0e:46:26:69:b4:6d:0a:ba:e3:c7:8a:bf:3b:92:
7c:71:a4:aa:3e:4d:71:c1:75:ea:01:4e:dd:fa:38:1b:e1:d7:
ba:3b:3c:ce:b2:63:b3:49:32:80:ef:1a:17:07:30:0a:95:30:
0d:71:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:51 2025 by rpki-client