Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
File: 5E7AC046554C11EB87AB9070C4F9AE02.roa (raw, json)
Hash identifier: 9SEp12826tyPgZ90rcyya6rTZZSYMM+g/IkmHnoRS+U=
Subject key identifier: 18:C5:88:FF:BB:E3:BB:32:33:90:92:70:48:7F:BB:ED:30:83:98:19
Certificate issuer: /CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10
Certificate serial: 05E7
Authority key identifier: C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
Signing time: Mon 12 Feb 2024 23:42:19 +0000
ROA not before: Mon 12 Feb 2024 23:42:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9381
IP address blocks: 103.247.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1511 (0x5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F23D
Validity
Not Before: Feb 12 23:42:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65caacda-3f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:5c:8d:52:d6:44:e8:14:82:b3:6a:22:57:
70:23:2a:2e:15:36:1d:5c:ec:70:b0:95:8d:da:73:
8c:41:ce:ea:3c:8d:92:c5:42:19:bd:de:35:d9:a2:
1c:76:0a:90:b8:2c:c9:0f:cc:1b:05:d0:3a:80:06:
6e:09:a3:b5:08:66:4b:39:ca:5a:b2:48:13:e7:33:
8a:e5:0b:56:ad:ea:97:8e:32:24:45:82:4a:74:5e:
be:2b:94:7f:f9:38:96:cd:21:c5:ff:d4:95:19:37:
39:ce:a8:30:18:39:12:08:ac:86:3b:65:b6:8d:84:
15:2c:6b:b3:3a:53:e0:c2:22:37:8a:2f:71:e1:bf:
fa:92:4a:99:bc:01:75:85:08:d0:21:da:a1:3a:25:
9b:ea:6b:52:db:72:6a:5b:7a:18:59:a7:45:4a:0b:
9b:0d:4c:e6:45:1a:b9:7c:e8:6f:b6:67:89:56:73:
a2:6c:5c:3e:89:fb:1a:47:54:d9:db:d0:9b:24:4a:
70:fc:45:2d:f5:d4:0b:8c:67:27:05:97:13:47:46:
62:76:ed:85:8c:2b:b0:1f:ba:37:65:18:12:18:4f:
9c:90:5a:51:98:a6:f0:a3:c9:2a:c9:e4:6f:50:99:
56:ed:12:fb:20:bf:08:80:3a:b4:2e:ee:a0:cb:85:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:88:FF:BB:E3:BB:32:33:90:92:70:48:7F:BB:ED:30:83:98:19
X509v3 Authority Key Identifier:
keyid:C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/5E7AC046554C11EB87AB9070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.164.0/22
Signature Algorithm: sha256WithRSAEncryption
71:2a:54:d3:a7:eb:62:42:f0:5f:f7:c8:b7:dc:05:16:41:f7:
d9:5b:95:19:4e:60:5e:06:b8:29:2e:24:ca:fc:d0:ce:ad:9d:
bb:29:7d:59:a3:62:6a:87:bd:56:49:26:90:60:c8:4a:cd:6e:
8e:ad:88:be:57:28:6f:f0:bd:4f:d1:1e:90:76:3a:08:75:c2:
86:2e:c8:41:77:b3:4a:ab:55:19:a8:e9:77:72:08:02:54:40:
85:5d:6c:bc:8c:45:9e:d0:b2:de:2a:db:87:ce:c8:a4:dc:63:
30:29:39:a6:52:e0:b3:34:b5:08:86:c3:df:3a:7f:6a:b6:48:
fa:63:45:69:6d:98:a7:3b:b5:b6:6d:b3:ba:39:40:d6:0f:2b:
b6:7b:f5:db:2d:b8:5e:f9:12:f2:0b:fe:79:16:72:03:6b:c6:
69:71:41:ac:93:d5:0d:b4:ee:7d:e6:33:c8:ee:c2:54:09:41:
78:e6:41:75:71:e1:ff:ca:e3:55:d3:41:7b:70:96:67:f9:5d:
ac:a6:05:81:ca:8d:a9:e9:9e:89:86:2f:b5:ef:7a:b1:4a:10:
3d:a4:e2:a9:27:40:a5:42:30:72:ad:f1:33:91:d0:3d:03:c5:
e2:ec:55:b8:74:03:af:cc:ea:3e:ca:27:5b:a7:1f:e2:3f:ec:
40:4a:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:32:58 2025 by rpki-client