Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa
File: A7872280B71911ED81414035C4F9AE02.roa (raw, json)
Hash identifier: G/NrPlImn5APtooki/YrO6I9fUDOFsDYxEWKs8O6WFw=
Subject key identifier: F9:8D:2E:22:EC:40:27:3C:49:56:1C:23:A7:A4:BA:43:B9:D5:A7:20
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4780
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa
Signing time: Tue 22 Oct 2024 07:33:40 +0000
ROA not before: Tue 22 Oct 2024 07:33:40 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135981
IP address blocks: 103.141.142.0/23 maxlen: 23
103.155.216.0/24 maxlen: 24
103.168.52.0/24 maxlen: 24
2400:3220::/48 maxlen: 48
2405:1a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18304 (0x4780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Oct 22 07:33:40 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67175554-5d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:b0:7d:da:8e:4a:79:da:7a:b0:21:aa:37:
ac:c2:43:e1:36:42:be:96:1e:5d:6b:05:f6:ba:7c:
2d:da:5d:c0:c6:90:15:c7:4a:55:61:1a:1b:d3:4f:
ae:e8:93:9d:2a:df:3f:45:05:8d:e6:4f:81:7e:e2:
b4:10:34:2c:91:37:ea:45:92:08:45:68:77:7c:f5:
90:57:f9:e5:8d:f7:d6:b6:ab:6e:04:d0:83:85:0e:
cd:b7:c0:7b:93:e5:c7:8e:f0:f1:45:b4:a4:f1:be:
e2:7d:b2:a6:cc:a0:67:c2:e2:73:ab:a0:39:1b:bb:
a1:60:61:4d:91:56:34:1d:4f:73:25:30:35:4d:cb:
da:f9:4e:63:b1:a8:24:e9:be:83:a6:cc:41:2c:20:
8a:3b:60:80:a4:00:e1:bc:e5:84:c2:e7:18:fc:58:
d9:13:8a:ea:18:d9:fe:78:87:72:37:17:d3:8e:28:
2f:7b:3d:29:74:47:3c:36:01:25:a5:8a:bc:00:de:
8a:b1:61:f2:c4:09:62:a5:0e:cc:8b:e9:ed:a5:7e:
02:d8:fe:d2:cc:63:18:38:fb:e0:30:28:05:d8:4a:
59:5e:d7:2c:ff:3e:35:d0:8e:3f:97:f5:cc:50:d2:
01:32:aa:6b:f4:8d:f4:e7:a1:ac:87:4c:00:e9:78:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:2E:22:EC:40:27:3C:49:56:1C:23:A7:A4:BA:43:B9:D5:A7:20
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7872280B71911ED81414035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.142.0/23
103.155.216.0/24
103.168.52.0/24
IPv6:
2400:3220::/48
2405:1a40::/48
Signature Algorithm: sha256WithRSAEncryption
02:a3:92:3e:96:c5:99:bc:4c:4b:44:2a:ee:6a:a0:ba:db:76:
d8:51:e7:2e:6d:4f:bb:b2:cb:44:6c:8b:9a:05:f8:35:df:f0:
2b:52:77:f4:e6:33:1f:b6:b1:f5:f0:d3:e4:05:62:d8:92:ac:
b6:a0:09:92:cc:f3:70:ce:31:7b:8b:08:b6:72:95:30:a8:2d:
cb:49:65:45:c0:3f:67:34:84:2f:dc:79:7a:2b:06:b5:b6:af:
6a:f0:30:d5:1a:37:d0:61:ce:c2:d8:a4:68:df:4f:cd:0e:fb:
86:15:aa:df:64:ea:e1:b0:90:2a:1e:ca:1b:04:fc:97:fa:fb:
56:b8:92:db:0c:2f:9f:96:25:7a:4a:55:7b:e4:5f:74:b5:94:
5f:35:44:6a:6f:29:14:10:18:44:ae:a4:76:31:3e:02:eb:ba:
54:7c:f4:e7:5e:f9:96:97:48:6c:09:1f:a3:fe:95:2f:1b:bb:
b5:13:f6:5b:d8:35:f5:95:52:d1:75:79:ea:43:0f:d8:3e:5e:
3a:0d:72:aa:d8:b7:ab:c2:b4:f6:dc:4d:0c:33:75:8d:77:99:
79:73:69:e7:ca:6b:2b:90:ae:05:13:04:b4:48:0b:74:0d:17:
58:6e:0d:c1:53:fa:f9:95:e3:52:ff:3d:2e:f5:63:2d:fa:e8:
e1:27:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:17 2025 by rpki-client