Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
File: 6F2092A0644311EEBC645F0BC4F9AE02.roa (raw, json)
Hash identifier: E84dMdVI76DPSab4iU5FNsCmUucTZjkkmgjNLfGp+6c=
Subject key identifier: 30:AA:6C:30:AF:55:AC:E7:41:80:07:03:FE:ED:C4:0A:8F:35:79:0A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4608
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:34:52 +0000
ROA not before: Thu 05 Sep 2024 03:34:52 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150884
IP address blocks: 103.69.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17928 (0x4608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:34:52 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d926db-dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:e5:ed:49:8c:e8:21:46:95:45:ae:c5:62:
b9:aa:5c:5b:6a:c3:3b:61:6b:73:48:66:c9:b2:30:
da:3d:98:4c:4f:12:f0:40:d1:f5:86:9b:e5:17:f9:
a9:55:b3:4a:6a:a8:41:1d:68:3a:9c:d7:d2:d3:09:
c3:e9:fd:c1:5d:b9:40:f8:87:ee:01:79:65:f0:0c:
e5:c8:51:88:7d:da:12:df:20:5c:32:cf:db:74:87:
0a:ad:6c:ac:58:77:58:81:63:5e:b9:20:90:27:3e:
17:20:11:e7:44:95:66:4a:8c:f4:05:33:8b:39:38:
7b:f1:74:ec:3a:6c:7e:02:94:98:c8:6b:ba:c2:95:
79:77:0f:1a:84:e4:16:c7:dd:f4:58:90:bf:22:59:
77:b9:eb:21:f2:a9:22:94:49:a6:b9:22:5b:99:d1:
3e:95:0b:05:b7:71:dc:13:38:23:30:29:2e:5c:ff:
b7:62:12:9e:50:53:22:76:0f:20:e0:77:3a:14:9e:
63:af:c9:34:e0:e7:2a:50:6a:15:fd:11:92:d8:86:
00:62:26:76:b8:43:bc:a5:01:dd:2a:eb:3f:6b:7d:
aa:c1:7f:17:3b:d0:2c:e1:67:b8:7d:6d:f5:23:19:
f9:49:a2:0a:f4:3d:11:2a:f6:1d:4d:91:94:77:de:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:6C:30:AF:55:AC:E7:41:80:07:03:FE:ED:C4:0A:8F:35:79:0A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.84.0/23
Signature Algorithm: sha256WithRSAEncryption
88:27:cb:55:25:a2:20:75:76:81:89:6f:d2:b2:28:1a:60:cc:
a3:77:75:ee:77:f4:1f:64:bb:05:23:33:b1:75:64:6a:cc:84:
69:21:16:2b:18:41:ee:4d:c5:37:e9:f8:1f:18:e0:f6:2a:88:
70:4f:58:00:38:f1:a8:f0:ef:ab:55:b2:54:1a:3e:6e:5d:b9:
ae:61:6e:c9:64:03:b0:61:d0:8d:02:84:fa:b6:80:6e:95:42:
2d:03:00:53:db:2e:e5:82:2e:a8:1b:1e:58:d6:8e:bb:74:80:
13:7a:21:d8:d8:2f:30:80:20:40:f8:3a:f7:55:1e:d6:25:9e:
d9:57:ab:08:63:ce:b9:f3:6e:7d:de:da:1f:29:81:cc:8c:2a:
4e:83:02:2d:b6:30:cb:6f:d2:a3:35:74:08:a5:c4:ab:d2:08:
d2:85:03:af:32:dd:fc:ad:e7:cf:bf:35:1b:bd:19:5b:2a:c8:
a9:f5:0f:ff:c9:86:a4:e1:70:82:91:0c:ce:d5:8e:53:d6:bc:
af:a7:b2:4a:7d:3f:cc:7a:15:c4:a9:ac:8d:32:0b:d0:8c:05:
0b:af:da:c7:8c:4d:33:ba:90:7c:c1:55:00:3f:27:3b:2f:e5:
17:df:91:03:aa:16:f7:a3:2d:91:e4:10:7d:4e:aa:87:19:2a:
a2:c6:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:01 2025 by rpki-client