Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa
File: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (raw, json)
Hash identifier: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU=
Subject key identifier: 24:F7:81:D1:D8:D7:32:43:65:4D:8B:2A:4F:A7:BA:69:3D:7A:BF:40
Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial: 0266
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:45:11 +0000
ROA not before: Thu 05 Dec 2024 01:45:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138388
IP address blocks: 103.124.96.0/22 maxlen: 22
103.124.96.0/24 maxlen: 24
103.124.97.0/24 maxlen: 24
103.124.98.0/24 maxlen: 24
103.124.99.0/24 maxlen: 24
2403:ddc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC100
Validity
Not Before: Dec 5 01:45:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675105a7-b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:4d:63:c6:dc:b9:58:ed:00:8c:7e:5a:fb:
e4:f5:8c:b4:9b:dd:32:f5:90:a8:38:13:c6:87:e9:
3c:98:e4:ee:8e:73:13:8c:91:d8:29:bd:62:69:bb:
39:c4:f9:13:48:24:56:e5:9a:28:d5:77:3f:41:a3:
68:c4:e8:e6:6d:23:4a:12:e0:29:e5:89:ed:c2:03:
81:ee:ba:27:9d:85:8d:8d:46:fe:47:86:c9:b5:92:
65:42:a6:93:b4:4b:5a:c9:b1:4c:d3:03:c2:35:80:
ab:2c:80:f5:ce:80:c4:24:c6:06:96:36:38:8a:3e:
3e:6e:b7:c0:4e:94:91:7e:7a:e8:88:04:cd:82:ea:
a9:60:16:25:0f:e2:ae:b2:0e:2c:22:71:75:19:77:
a9:9f:7d:39:75:e6:b7:5d:a5:72:46:29:7c:74:85:
6c:ef:02:9e:05:b8:6a:6f:f8:16:f8:47:ac:ba:7e:
f5:c0:aa:47:27:bf:a1:73:e1:81:eb:8a:59:7f:33:
68:f8:b2:c1:7c:78:4a:fd:71:82:f3:31:50:fd:dc:
9f:47:eb:71:79:19:10:ea:e7:93:1e:51:4d:6e:3e:
70:6e:2c:e7:51:c1:6f:c0:4b:0f:b6:e2:98:93:20:
57:37:ab:62:39:81:15:01:6b:fa:8d:3c:d0:96:2a:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:81:D1:D8:D7:32:43:65:4D:8B:2A:4F:A7:BA:69:3D:7A:BF:40
X509v3 Authority Key Identifier:
keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/29B6EA80F2C411EC97A42B73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.96.0/22
IPv6:
2403:ddc0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:67:33:23:58:35:14:89:ed:3f:b1:a9:c4:87:e0:1f:29:34:
17:b8:07:ae:a3:0c:b6:38:a7:d2:a3:56:fe:30:85:3d:ca:c0:
a1:5e:dc:b1:10:b1:c4:8b:8f:74:98:fe:a3:e8:6f:74:3b:53:
2e:23:ee:9b:f0:fc:09:5c:a7:ea:e7:02:8a:93:5e:8f:25:97:
c4:67:e2:44:55:5c:0a:34:58:37:5f:3b:85:39:41:40:b1:8e:
7f:73:58:00:ce:74:dc:82:32:f0:82:ba:dc:21:8d:7a:94:b8:
0c:a5:d5:02:31:1b:7c:2d:36:fb:d4:5a:a5:01:2d:70:71:55:
a0:49:88:fe:1a:7c:20:97:4d:73:0d:ea:4e:20:4f:85:9d:db:
13:dd:41:c0:d5:cf:fd:0d:04:f9:6c:26:42:57:a0:97:4d:4f:
da:4c:55:58:fe:12:d4:1c:0a:ac:b6:02:66:33:3f:f7:a7:e6:
52:ca:83:42:30:17:22:ea:57:99:75:7f:e9:27:ba:32:8d:61:
bd:76:fb:9a:51:87:80:78:de:3d:b6:f3:18:db:9a:e8:3d:18:
58:09:86:a3:27:e1:eb:10:54:e7:e4:e9:bb:a7:12:57:42:81:
a4:63:5e:58:c8:bc:3f:3d:1b:64:23:fc:13:0f:b7:25:a9:a3:
6f:20:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:54 2025 by rpki-client