Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/AA378BD6405111ECB91F2A37C4F9AE02.roa
File: AA378BD6405111ECB91F2A37C4F9AE02.roa (raw, json)
Hash identifier: YiHdcGxWTXUcZ/kSD9dFHBm9eVNGnT5o+X8IY323ls0=
Subject key identifier: 7B:54:F5:93:21:C2:C6:35:56:1F:D2:B6:00:1F:A9:CF:45:86:BA:AC
Certificate issuer: /CN=A91B166D/serialNumber=C9B4DE4874965BFF3B2F04710122577E6D9B1D14
Certificate serial: 0BA1
Authority key identifier: C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/AA378BD6405111ECB91F2A37C4F9AE02.roa
Signing time: Thu 30 Jan 2025 19:08:24 +0000
ROA not before: Thu 30 Jan 2025 19:08:24 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 138905
IP address blocks: 103.146.48.0/23 maxlen: 23
103.146.48.0/24 maxlen: 24
103.146.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2977 (0xba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B166D
Validity
Not Before: Jan 30 19:08:24 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bce27-ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:9d:0f:c6:88:58:f8:86:65:17:e3:65:7a:
eb:fe:e8:73:2d:38:32:22:8b:b1:a8:75:80:37:eb:
31:0a:85:fd:7f:92:b6:e2:f1:4a:69:36:ea:da:01:
89:45:f5:3f:b7:fc:d4:c2:fb:e5:34:ab:d1:44:48:
e2:a8:ee:65:b0:cd:e6:30:ba:a4:94:43:4f:59:cf:
44:22:be:c3:1f:cb:84:da:b3:2a:fe:a0:3c:5d:df:
bc:dd:8b:4d:32:0b:a4:63:b3:95:48:0b:66:e5:5f:
30:27:72:e6:82:dd:2e:82:d9:b2:69:91:d7:c3:4a:
ba:38:a4:96:99:bd:fd:c1:c2:63:da:23:4f:17:f6:
78:32:b8:e2:61:28:05:37:12:6b:c2:b9:15:07:43:
c6:27:b0:70:ed:00:52:d6:38:94:04:50:44:2b:92:
25:fb:ad:17:11:73:33:3a:02:eb:7b:34:a8:1a:26:
d9:fa:53:46:ac:d4:73:f5:d4:92:90:11:55:3b:5a:
6f:0e:30:31:d2:df:ca:66:7e:b8:9d:7c:44:8e:c8:
e1:35:f3:04:ec:b9:08:47:3d:f3:de:b4:55:7c:70:
dc:29:01:72:74:eb:cc:e9:9d:6b:fb:15:3f:8c:7e:
50:d3:6e:c3:d2:4c:54:1f:fc:91:7c:b3:e7:45:93:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:F5:93:21:C2:C6:35:56:1F:D2:B6:00:1F:A9:CF:45:86:BA:AC
X509v3 Authority Key Identifier:
keyid:C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/AA378BD6405111ECB91F2A37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.48.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e6:76:9f:77:ac:89:a2:dd:fb:ac:68:df:92:c0:04:02:e1:
b8:af:ba:9f:d9:01:ef:f9:30:40:ec:24:38:db:b0:40:d5:c7:
46:d3:69:3d:6a:d1:45:00:7a:d2:15:21:3f:85:b7:cd:7f:5c:
cc:bb:81:30:96:c3:bd:bd:90:25:e5:f5:a3:0c:c9:2b:09:96:
1b:dc:f6:e8:17:a1:f7:13:ca:c9:dc:e2:6c:7f:49:ee:5a:c3:
5d:dc:dc:cc:73:97:2d:61:04:52:4a:a4:53:9c:bf:de:9e:11:
9c:2c:0c:28:c7:f0:c6:f8:65:ba:b5:4e:ad:6a:1c:3a:39:0c:
b3:8e:c5:3a:ae:00:cd:e5:6c:18:25:76:57:a3:a7:77:78:d0:
e1:1e:9f:43:a4:9d:ea:2f:eb:19:93:10:f5:f8:9b:06:7d:7a:
04:a5:91:3a:5d:61:09:5e:ad:b5:52:83:c2:10:21:82:1a:ae:
96:92:12:97:5a:56:f7:84:9d:8d:9e:44:c2:ab:ef:ff:8d:5d:
20:b5:14:6d:83:b4:18:9e:fb:9d:41:5a:c0:57:7d:9d:2f:d5:
01:74:fb:eb:a0:c4:80:7f:23:7b:96:e9:b9:9e:e9:8a:e2:51:
fc:ce:b2:06:e2:be:a7:81:d7:23:b7:f8:63:79:13:75:9b:77:
48:f7:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:09 2025 by rpki-client