Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
File: E2E21364C4F811EAB8D31113C4F9AE02.roa (raw, json)
Hash identifier: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=
Subject key identifier: 4A:2B:15:2D:85:F6:3F:E4:BD:39:2B:71:1A:FE:08:B8:0E:4C:46:78
Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial: 082F
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
Signing time: Tue 20 Aug 2024 21:29:33 +0000
ROA not before: Tue 20 Aug 2024 21:29:33 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138538
IP address blocks: 103.152.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABFD9
Validity
Not Before: Aug 20 21:29:33 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c50abd-5b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:9a:f1:f2:a1:0b:0f:2c:e6:c3:d5:fb:0d:
37:8a:7f:f3:b7:ba:0f:94:1f:89:70:48:ec:02:e0:
6d:24:36:1a:95:4c:37:59:98:b1:ba:39:8a:da:89:
05:b3:84:de:f9:96:cb:e2:93:0d:5b:9c:2b:fd:f0:
d6:4d:d2:3f:3f:27:7a:c8:8e:c0:b9:35:3f:9b:0c:
e4:02:7b:15:cc:e7:e2:76:c2:45:5e:4d:15:5a:26:
78:34:76:1b:fb:dd:5e:da:9a:6f:ab:72:97:fd:fe:
55:0d:42:08:f3:c0:58:08:e0:3b:7f:65:04:eb:05:
7c:ed:fd:b9:e1:70:b3:2a:a4:4d:40:14:07:08:bf:
cb:15:b5:1a:dc:1b:f9:4a:87:47:0b:5e:c8:d9:d1:
2d:d7:16:a1:d1:0d:7a:eb:52:f6:74:f4:b8:63:50:
93:d2:89:f2:f3:14:fc:e9:06:17:d3:a1:d0:bc:b2:
da:53:f9:12:b4:a1:66:61:ee:e4:87:f2:7d:2d:31:
e8:74:c3:90:17:9a:ed:27:d6:cd:19:09:87:0c:1d:
7e:d3:56:91:d2:8e:7d:a5:d7:10:a4:59:b6:03:cc:
76:7d:68:31:4d:39:21:20:f7:b3:3c:5e:22:3b:57:
11:25:f1:3b:05:f2:8a:80:a2:74:4c:7c:07:e1:fe:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:15:2D:85:F6:3F:E4:BD:39:2B:71:1A:FE:08:B8:0E:4C:46:78
X509v3 Authority Key Identifier:
keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E2E21364C4F811EAB8D31113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:10:d8:d3:e5:b9:0f:a6:b8:09:f5:74:e6:b3:a3:87:f5:1c:
95:21:f7:62:c3:75:bb:ae:83:81:c9:7a:14:cd:eb:20:6f:47:
ce:c2:c2:d4:ac:16:1f:d1:db:b0:40:4d:a7:4a:6f:fd:e7:f7:
bd:e2:76:bc:bb:99:ef:88:2e:5a:f0:0b:a2:2c:3b:d2:b3:2b:
a4:c9:a2:cf:c1:3a:e7:4c:2a:96:89:1d:74:af:6b:ac:95:be:
ae:8a:ac:d1:26:64:f7:88:25:db:50:11:1f:ca:94:35:10:38:
82:8e:86:23:58:8e:f6:b4:85:00:a4:db:c7:2a:52:6f:5f:55:
63:a6:0f:fc:6b:65:5f:9a:f5:b5:07:f1:2c:a6:40:b6:d9:dc:
aa:e5:09:4c:4b:83:0b:38:a7:18:31:da:e5:4b:d5:4d:d1:9f:
b2:a3:ea:06:41:8b:66:a0:d3:39:95:85:5e:00:81:28:08:9a:
ba:34:60:29:3e:b0:93:17:35:98:f6:bb:10:8a:6a:70:8d:42:
f8:f6:e5:80:da:69:65:d3:03:26:5d:09:de:2b:96:ff:82:16:
b8:9f:92:b3:c5:55:e7:94:34:77:9c:d3:bc:b8:db:52:22:81:
ca:7e:1b:ff:01:56:8e:94:63:76:fe:21:8f:88:8b:27:f2:8d:
ad:a3:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:53 2025 by rpki-client