Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
File: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (raw, json)
Hash identifier: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=
Subject key identifier: 09:F1:18:28:B6:4E:B8:ED:21:10:E1:68:62:F5:2E:55:5F:09:45:F5
Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162
Certificate serial: 03A1
Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
Signing time: Thu 19 Dec 2024 00:34:07 +0000
ROA not before: Thu 19 Dec 2024 00:34:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 131284
IP address blocks: 103.133.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8265
Validity
Not Before: Dec 19 00:34:07 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=676369ff-2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:eb:02:da:61:98:4e:b1:dc:3f:42:65:07:
1a:86:47:2f:fc:81:dd:4e:43:c9:2b:b1:dc:0b:c7:
01:71:10:76:0f:c8:d6:84:41:29:85:7d:63:fe:5f:
d9:95:f9:d6:ea:3a:b4:35:86:8e:13:02:ea:8d:c3:
aa:d8:04:56:0c:0d:ce:4c:bd:4f:81:be:35:77:23:
46:8d:b2:f7:c0:74:a6:b5:74:61:dc:72:d7:f2:3f:
21:5f:c2:25:69:a6:17:31:14:bc:2e:a7:f0:74:06:
00:9e:c4:95:83:b4:95:c2:f6:de:f9:b4:5f:55:23:
86:29:39:42:6c:bb:66:2d:45:7f:e7:4c:0c:87:78:
47:4b:25:5c:01:b7:f4:92:69:eb:26:95:78:e2:54:
59:92:79:08:8c:b8:16:3e:cf:cb:25:e0:47:5a:3f:
10:1c:2d:95:e9:1c:30:1e:95:a7:0a:8f:8f:8c:fe:
28:44:18:ec:d8:07:4f:55:0f:24:56:15:1f:4d:d3:
16:64:ac:b3:40:52:c0:bd:69:4a:44:83:25:83:b4:
8c:45:51:9f:f9:9f:59:7c:4f:18:a0:a0:bd:ff:35:
b7:73:f1:50:b1:41:40:87:6a:92:66:20:f9:1f:0d:
f5:fa:cc:ea:9b:00:21:23:97:89:ae:f4:98:d6:14:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:18:28:B6:4E:B8:ED:21:10:E1:68:62:F5:2E:55:5F:09:45:F5
X509v3 Authority Key Identifier:
keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/84F58DCA7DCB11EC99806E25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ae:7c:33:3e:ed:54:46:2c:02:9c:de:09:c2:54:1a:1f:31:
56:42:07:d6:d1:44:5a:7a:db:fc:8b:97:ab:62:ae:1b:d4:3c:
fc:bc:fc:21:ad:c1:ef:8f:cd:f8:b6:19:43:1f:6e:fb:09:50:
71:50:46:68:ba:9b:5e:8b:27:d4:79:d0:53:4e:6c:f2:91:28:
03:02:98:a4:14:41:ec:c7:56:83:5b:3a:da:ce:89:34:a3:94:
88:b0:b4:84:35:ff:fc:2a:a1:22:e5:af:af:60:83:13:61:1e:
f4:86:a0:69:4a:74:21:52:fe:b1:09:85:11:cf:b3:f5:d6:a6:
c9:18:43:aa:5e:35:d5:f8:12:d9:13:67:c9:a7:15:2d:48:91:
35:dd:02:8a:38:dd:82:38:d2:4d:4a:dd:b6:36:ca:f8:24:3f:
00:0b:9d:18:a3:f1:ab:61:f2:fe:09:f9:af:ed:e9:4b:50:5d:
0c:c0:47:c4:e8:6e:98:29:f4:a9:87:af:43:99:08:51:28:b5:
ae:9e:86:6b:b1:0e:7e:4a:35:23:90:fb:80:1b:8a:3f:7b:a2:
0b:07:d1:f1:0c:c3:df:fa:00:f1:c4:f8:3f:33:e1:c1:b3:b0:
aa:4b:71:c6:f8:49:30:38:46:2f:9d:5f:40:cb:78:26:9b:a4:
a6:7e:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:14 2025 by rpki-client