Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/0802DFC67B1C11E8BC732C17C4F9AE02.roa
File: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (raw, json)
Hash identifier: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=
Subject key identifier: 91:2A:43:AC:10:36:59:48:F8:AA:86:01:AB:44:D8:29:8D:1D:88:66
Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7
Certificate serial: 1377
Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/0802DFC67B1C11E8BC732C17C4F9AE02.roa
Signing time: Fri 12 Jul 2024 17:55:22 +0000
ROA not before: Fri 12 Jul 2024 17:55:22 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9890
IP address blocks: 103.115.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4983 (0x1377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D5CF
Validity
Not Before: Jul 12 17:55:22 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66916e0a-f659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:20:9f:12:02:29:f3:02:03:ed:6b:ff:d5:
ad:a5:9b:82:3a:94:dc:b2:e8:bd:d0:6f:bd:16:4f:
30:60:20:44:b4:5c:eb:7a:75:8f:d3:51:b9:65:fc:
cf:a9:3f:07:46:86:f9:ee:64:48:08:e3:c7:b6:15:
15:3c:65:a1:f8:84:ea:96:16:7d:81:ff:9d:d7:1d:
f3:c6:d5:ad:6b:18:6d:dc:31:b1:43:48:de:c6:7b:
28:22:65:a2:60:be:15:eb:45:08:73:cc:08:c1:6d:
2d:a2:27:38:72:74:4d:a4:6e:be:57:5a:fc:f6:d8:
4b:f8:38:91:f9:f7:4b:d8:87:48:98:94:99:1c:4b:
cc:c3:50:e0:5b:42:18:38:15:4c:bb:8a:da:59:fc:
08:6a:4c:12:9e:e7:a7:f2:8f:86:7f:07:d2:8e:1b:
b9:30:55:10:50:76:b7:2d:d0:91:17:56:3e:86:f6:
59:a5:69:81:f7:12:03:eb:87:65:01:be:89:6f:b7:
ee:c2:47:6b:9b:a5:89:e8:a8:7e:ff:fb:e5:3d:d0:
ca:99:58:a0:53:80:49:ca:06:29:6d:0c:7e:1c:d9:
c4:cd:ab:6e:f1:9a:92:32:8e:e4:c6:68:a9:1d:35:
24:02:e7:ae:99:2e:fe:49:c6:22:6a:f7:10:9c:24:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:43:AC:10:36:59:48:F8:AA:86:01:AB:44:D8:29:8D:1D:88:66
X509v3 Authority Key Identifier:
keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/0802DFC67B1C11E8BC732C17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:79:9d:82:fc:c8:b9:ea:84:5b:e3:9a:d4:e5:d1:44:38:f0:
c6:17:4c:33:d0:4e:44:7c:a6:17:0f:23:0b:6c:27:90:06:ed:
d0:fa:a3:a6:7c:4c:a5:81:0d:53:f7:9c:83:b3:f9:b4:48:33:
93:08:a8:d1:60:b2:80:2c:04:d6:63:9a:03:8a:1c:0a:0d:42:
59:ee:d1:75:38:ef:69:24:ce:3d:4a:2d:2e:98:ed:2e:bb:17:
ec:23:3a:53:c5:d4:36:72:9f:21:9e:0b:55:a4:72:a7:16:c9:
d6:03:6f:44:58:ae:b1:f6:d1:e4:5f:ad:34:1e:5f:9e:62:28:
b8:57:57:49:b4:f8:b9:9b:3f:d8:4b:52:f2:ca:a4:f5:37:68:
fe:1f:99:e8:e7:17:6c:49:7c:60:49:19:01:ef:0c:ea:75:32:
a1:13:44:e1:7c:6b:05:b7:0e:c7:05:66:d5:37:79:14:52:3a:
6a:c1:bc:87:46:f5:81:d4:66:9c:79:8f:54:c5:f8:43:8f:c0:
a4:1f:89:a2:70:1d:a7:e6:c5:5d:08:8f:89:4c:83:f7:17:e4:
46:d2:ba:04:37:e3:0d:9f:80:4c:14:c1:dd:78:7e:96:ca:06:
fd:88:0c:6c:a0:81:84:9e:b2:c5:50:0b:17:9e:80:17:4a:05:
88:ec:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:38 2025 by rpki-client