Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
File: 24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa (raw, json)
Hash identifier: VmSPAMGA+YP4q4dSexY7Ep/vdoLO5P4y6VgK4UsiVno=
Subject key identifier: E4:ED:F2:92:81:FB:B8:37:90:59:AE:38:9D:EF:DF:30:C7:04:16:F1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4612
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:01 +0000
ROA not before: Thu 05 Sep 2024 03:35:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150901
IP address blocks: 103.77.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17938 (0x4612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:35:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d926e5-f30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:f1:0b:e0:d5:d3:e6:6f:8f:38:d8:fe:2c:
e2:33:cf:25:d8:01:f9:0f:d6:9c:29:b7:c7:84:31:
54:19:63:8b:d2:e2:b6:bc:17:0b:fc:ee:4c:26:e5:
aa:6e:cc:e1:57:26:56:f5:f5:10:3d:68:b9:c5:36:
0e:f4:38:85:18:72:1d:e7:de:a4:44:72:e3:dd:f7:
5d:fb:a9:9b:aa:6e:87:9e:8a:6d:28:b5:60:91:00:
05:40:b7:ed:ff:8d:3c:34:a2:08:98:b5:f6:0d:d5:
8d:92:70:44:d6:30:14:46:6b:8f:96:48:46:ca:13:
ad:43:b5:fd:2b:27:38:0c:57:78:fb:4d:69:ab:f2:
d0:b9:8d:51:52:96:3d:6b:51:2d:cb:24:ab:c5:58:
c6:67:da:bb:db:73:e6:72:01:cf:44:a8:69:12:5e:
bf:96:f5:dc:95:e2:ce:3f:37:63:75:3c:f4:fb:41:
5c:ae:67:00:be:a2:b3:35:8b:8f:76:01:02:9a:d7:
ab:0a:0f:1b:ed:8a:1a:f4:5e:03:6e:0b:70:17:2a:
a4:fd:67:37:f1:6f:d2:ea:79:c2:6d:6a:32:1b:ed:
06:74:fe:d3:e1:13:cc:c1:60:40:2d:63:b4:5d:06:
2d:d2:f9:7c:b1:26:51:58:64:43:41:f5:ec:7f:ad:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:F2:92:81:FB:B8:37:90:59:AE:38:9D:EF:DF:30:C7:04:16:F1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/24EDD67E7EAC11EEB8FD7D37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.244.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cb:84:44:2d:7a:36:5c:40:2f:82:93:86:c2:04:29:1b:4d:
30:66:d7:da:35:e4:66:e9:04:f4:ba:80:c6:84:5f:14:ce:2f:
17:d3:0a:71:53:1c:28:35:c4:f2:a0:f7:59:b2:0a:fd:1f:38:
4e:c8:ed:bd:19:94:95:b7:e6:95:8e:15:42:e1:ee:88:63:86:
18:59:86:a4:84:da:a9:44:7b:58:5e:1d:07:34:e5:e4:64:fc:
a5:a2:ae:20:0b:d9:f2:e2:cf:73:f9:be:40:2c:79:0f:9e:08:
90:0f:86:7a:43:49:40:d4:e0:cf:57:74:56:7e:8b:d5:c9:64:
bc:0a:59:61:ea:89:20:4b:d0:86:3b:a4:69:ea:63:41:00:a4:
a4:6d:7d:3d:bf:a8:9e:e2:f4:80:b6:97:ab:02:34:75:4f:50:
72:7f:55:10:66:a2:a2:3b:92:22:47:31:1a:31:23:d2:f3:f5:
fb:13:cc:9c:b3:26:5e:b2:e1:96:92:68:11:ac:92:b4:21:61:
1c:b9:b5:12:d4:5e:43:4a:b2:db:e9:7b:eb:1d:ff:ed:b5:fb:
cf:0e:98:3b:10:43:dd:4b:77:16:62:c5:9c:b0:44:a6:25:30:
4f:0f:bc:00:80:8c:11:76:76:21:3f:aa:5c:61:08:cb:76:71:
4e:8d:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:19:28 2025 by rpki-client