Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa
File: 9F9FD574758811EA93AADD3FC4F9AE02.roa (raw, json)
Hash identifier: 1Gen1/T5J9VcUP7yeBxePtjlwSEPjuywH9LIrIKtzGg=
Subject key identifier: 3B:2B:96:51:9A:8B:B1:72:4D:37:DE:7D:6F:A9:73:00:E7:3A:C3:6A
Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial: 0A93
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa
Signing time: Sun 04 Aug 2024 19:58:07 +0000
ROA not before: Sun 04 Aug 2024 19:58:07 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135312
IP address blocks: 103.116.180.0/22 maxlen: 22
103.116.180.0/23 maxlen: 23
103.116.182.0/23 maxlen: 24
2402:fec0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B171C
Validity
Not Before: Aug 4 19:58:07 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66afdd4f-1bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:d3:53:ea:88:bd:31:18:1e:13:46:e2:99:
c9:aa:b9:1f:be:54:c3:21:7c:92:2f:42:e0:7a:9e:
17:13:4c:3e:2a:ad:74:15:15:b5:7d:9f:78:f8:34:
23:3b:ff:90:2c:4b:44:71:8f:06:93:e6:01:a1:cc:
01:d0:09:67:f9:4d:d9:39:8e:a0:cb:5e:fc:f2:91:
36:88:57:ce:5e:20:de:b5:ab:a0:f9:26:6b:38:db:
70:a1:b3:a2:94:3b:3e:5f:77:6e:7f:fb:44:df:85:
a7:2f:dd:c7:e7:b0:91:32:1e:a3:03:75:9d:00:1a:
5a:47:09:ed:5d:65:52:0c:60:98:36:e9:c8:9d:2b:
17:8f:63:37:3f:b7:c1:14:8e:54:8b:72:bd:ff:86:
c7:55:37:eb:ce:3d:5f:4f:80:7a:8c:95:59:ca:a6:
9d:ad:91:50:71:cd:2b:4a:98:f0:a9:0a:44:42:ab:
0f:31:dc:d6:65:8a:b2:c7:05:78:c7:40:de:36:09:
92:be:77:63:d0:b6:03:b4:2c:90:37:3d:c5:92:71:
db:50:5c:2a:d1:62:8a:88:1a:2e:fc:48:b4:dc:e4:
14:d3:73:53:9a:f5:82:b6:75:bd:30:18:a8:eb:5a:
ef:54:5a:60:d6:ac:95:63:cf:08:da:e3:95:84:65:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:96:51:9A:8B:B1:72:4D:37:DE:7D:6F:A9:73:00:E7:3A:C3:6A
X509v3 Authority Key Identifier:
keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.180.0/22
IPv6:
2402:fec0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:10:84:15:34:ba:2e:ee:e0:27:2c:66:03:d8:ad:36:e3:9c:
e9:95:ae:9b:98:4d:9d:ec:bb:07:9f:01:ae:86:d0:7f:b8:fa:
c3:36:d8:a4:b0:b1:84:62:82:d8:54:c3:af:6d:dc:00:17:e9:
be:2f:7c:88:5b:de:c3:12:dc:b2:a0:4a:85:ab:5b:29:83:a6:
1f:c5:3a:d4:08:21:bc:59:58:da:1e:e3:08:cd:c1:27:92:a7:
b0:b0:fc:cc:a3:34:14:8d:93:62:13:19:99:e6:e7:68:ad:68:
b5:a2:03:1c:16:fb:d7:a6:76:80:52:01:5f:3c:bc:88:0d:8c:
d7:50:5d:99:87:b9:fd:2d:be:ab:f4:9b:6b:6e:e5:ec:bc:b2:
85:84:7d:a6:2f:f5:cf:a9:b2:42:74:20:8b:62:3a:5d:b1:b8:
a3:db:5e:38:74:42:2a:63:c5:07:fd:fc:e7:18:cd:a7:84:f4:
0f:e3:13:56:3c:b0:70:0e:65:ea:12:7c:23:7d:4f:5e:3c:c2:
83:5e:32:b3:d9:3e:77:16:3b:43:ff:61:27:08:a3:70:42:3d:
ea:7f:1b:fa:14:40:fc:4d:48:ae:44:c7:7d:b1:e4:4b:3f:2a:
83:ac:b7:eb:d5:b4:7f:1d:82:87:4b:70:ea:85:77:01:c1:23:
2f:d5:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:27 2025 by rpki-client