Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B82C2A50357211ED8937CB38C4F9AE02.roa
File: B82C2A50357211ED8937CB38C4F9AE02.roa (raw, json)
Hash identifier: jTXYUQYYx5IMr0jLnWIhSvIpyFVE7UDeOdIW6J/ujHM=
Subject key identifier: 60:BE:7D:89:CF:A8:50:BD:01:7D:7E:93:FF:01:05:49:96:73:86:5C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4969
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B82C2A50357211ED8937CB38C4F9AE02.roa
Signing time: Thu 23 Jan 2025 09:44:15 +0000
ROA not before: Thu 23 Jan 2025 09:44:15 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140764
IP address blocks: 103.160.4.0/23 maxlen: 23
103.160.4.0/24 maxlen: 24
103.160.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18793 (0x4969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Jan 23 09:44:15 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67920f6f-f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:be:8a:4a:de:a7:c0:ed:41:90:6d:d8:8d:
70:2e:d6:32:62:9f:62:fb:e3:86:a5:1c:0d:dd:56:
52:54:d9:f8:58:d8:15:d8:6a:75:65:65:96:93:27:
14:cd:13:68:62:09:8c:da:e4:f4:89:a2:41:34:d7:
33:bf:cc:c5:99:01:33:4e:ab:96:e2:cd:c7:8e:34:
4f:89:95:a2:73:4a:a0:a9:b9:05:a6:6d:7a:11:d2:
6b:7c:dd:e9:c5:34:63:20:f8:8e:02:d5:7c:2f:6e:
7b:23:34:af:f8:16:04:81:6a:99:8d:92:1c:4f:6e:
1b:15:cd:2b:b0:8c:be:b5:a8:fe:58:4c:bc:27:8c:
1c:3f:d8:30:08:90:49:1f:6b:9a:85:bb:10:af:0e:
d0:25:cd:04:ef:dc:be:b4:ee:86:a5:0a:25:e6:1c:
bb:25:88:e9:8a:02:01:58:d2:e0:c7:34:4f:23:66:
78:44:8c:f1:0c:37:3f:64:e0:59:d6:f7:72:e3:d6:
a3:b7:5e:c5:ef:ab:68:52:6c:b4:25:cd:ab:c7:d9:
8d:3d:51:a7:b5:e2:de:30:5a:fd:f7:4c:32:d0:13:
59:32:c2:23:4d:58:79:01:80:e8:dc:b8:9a:3d:32:
54:9f:f1:e9:b9:9a:01:e7:26:98:70:db:1b:44:bf:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:7D:89:CF:A8:50:BD:01:7D:7E:93:FF:01:05:49:96:73:86:5C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B82C2A50357211ED8937CB38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.4.0/23
Signature Algorithm: sha256WithRSAEncryption
69:2c:7d:90:2b:6d:d6:5e:ad:40:96:50:98:21:ec:7a:f1:7f:
08:ed:99:38:08:a9:fa:6a:d2:21:69:78:78:3c:8f:72:20:69:
5c:7a:49:67:55:d5:39:0b:e5:8d:eb:c2:e2:fa:06:0a:13:63:
df:24:d2:62:f0:ad:e1:9f:a2:10:c8:67:1e:91:aa:61:31:e6:
05:00:8e:1f:73:0c:c5:10:0f:bb:da:89:57:93:79:62:c4:ca:
92:78:c9:f3:d8:c6:90:20:a7:23:73:2a:ad:5a:c7:c1:81:58:
74:46:99:a3:b5:4f:05:3c:2a:1a:df:e5:01:c4:99:60:a2:a6:
8d:68:2e:5f:1b:33:25:bb:9d:05:d6:70:5e:4f:b6:db:a1:80:
ff:34:be:d7:ee:a3:a2:f0:21:fc:3f:7f:54:93:86:9e:1b:5f:
7d:2b:7d:f2:0a:35:06:3c:e6:77:95:b6:1c:60:8f:ff:c1:36:
67:39:c3:a7:d4:70:5f:62:78:30:e3:98:2e:16:da:d9:77:50:
24:11:02:92:70:8e:81:e3:ec:a4:88:8b:76:55:7e:81:af:82:
ef:02:39:15:8d:69:c9:b4:e9:fe:14:0b:05:e3:e3:d4:3b:86:
7d:d6:ae:c9:64:92:b9:c9:bf:83:a1:16:d3:d8:39:52:23:69:
9a:07:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:15 2025 by rpki-client