Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
File: 777A546212E511EFB071A31CC4F9AE02.roa (raw, json)
Hash identifier: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=
Subject key identifier: 6F:F6:A1:D8:3C:45:56:FC:D4:17:EC:4D:38:3D:FA:DC:DD:70:5D:2D
Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial: 0B24
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
Signing time: Fri 04 Oct 2024 19:27:59 +0000
ROA not before: Fri 04 Oct 2024 19:27:59 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138004
IP address blocks: 103.142.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADF12
Validity
Not Before: Oct 4 19:27:59 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670041bf-3f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:12:bc:63:75:ca:11:5d:75:05:4a:bd:d3:
51:07:98:79:86:01:a8:82:a7:61:ed:84:3e:2f:0d:
4a:45:bd:92:c9:cd:70:14:c0:e9:e4:b6:65:94:72:
c6:13:69:6b:27:bc:8c:5c:5e:77:e9:70:87:a0:3a:
a1:61:df:9e:bf:b0:47:31:de:93:2e:b3:f4:28:52:
bf:ab:18:ac:8a:05:1a:5c:de:18:d8:6b:65:5f:ea:
be:4b:a8:76:7a:db:6b:d0:44:25:41:8f:c3:8d:99:
24:60:fd:e2:24:46:60:c0:ed:97:7a:51:17:68:af:
2d:15:ce:df:f7:ab:8d:e9:92:91:3a:3c:d4:56:2e:
e0:d9:41:aa:16:90:99:51:99:e9:c5:49:45:d0:3b:
ba:b0:2c:ea:a5:bd:42:5e:7d:67:a7:8d:37:67:33:
a7:bc:45:eb:59:ca:b7:80:29:04:49:c5:8d:dc:f3:
8b:08:ea:d0:c5:fd:b6:6f:26:ce:be:0a:5e:46:4a:
9c:4c:ee:5f:e8:8d:a2:67:b1:f2:c5:b0:6c:a7:12:
92:12:28:ca:2b:6c:ce:9c:e3:da:f9:83:a6:87:ca:
d6:a1:4f:a6:18:ff:ec:4a:be:64:3c:d0:5b:7d:4f:
6f:ca:4c:1f:cd:d3:cb:cd:fe:cf:6a:4e:7b:37:fa:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:A1:D8:3C:45:56:FC:D4:17:EC:4D:38:3D:FA:DC:DD:70:5D:2D
X509v3 Authority Key Identifier:
keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f1:ac:c2:1a:d0:ef:05:43:e8:f6:8a:46:5e:04:89:60:50:
30:a3:b7:be:3d:bb:cb:37:ad:a7:b8:6f:fa:48:c6:6b:bd:6e:
cd:69:cb:dc:9c:49:4b:56:80:9c:7b:fb:77:91:7a:36:52:22:
55:c8:87:9e:7e:11:7c:64:80:34:3e:16:3c:8f:6b:35:38:46:
b1:2c:5a:14:a9:d9:92:b4:51:11:96:33:67:0a:b9:e0:52:42:
57:98:bc:03:84:ca:53:87:3d:b6:82:65:a7:98:3e:3a:f0:3a:
d6:e1:96:75:6d:db:d1:19:13:ac:61:6b:8a:71:cd:fb:63:c7:
40:20:48:4c:a3:44:bf:b3:58:5f:8f:90:ca:2c:84:30:da:0e:
a7:f2:0f:9c:6d:cf:d8:d2:50:85:53:e2:7e:35:5e:92:9b:20:
ff:e6:35:3d:5e:98:06:1b:b0:b9:cb:de:af:94:b6:07:d9:c6:
d1:61:86:ff:4f:bf:45:2f:ab:aa:52:41:f8:07:86:c6:85:31:
bc:e0:7f:99:e0:5e:4f:37:06:a5:19:39:b2:ef:1b:fc:c2:62:
d4:56:76:9f:ab:56:5d:b7:1b:95:f8:c4:49:b2:8c:fd:44:22:
ad:07:b3:89:03:11:0b:03:40:b2:36:b1:ed:ae:69:a2:40:07:
a6:12:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:09 2025 by rpki-client