Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa
File: 99667AD4F83211ED97101D26C4F9AE02.roa (raw, json)
Hash identifier: 2OG0+2v9VA4dZFvNj2X3CNFWKhubxv4DPcDnyPwBjTQ=
Subject key identifier: 82:44:1B:24:00:41:8A:BB:E5:FE:97:AB:B2:63:FB:10:C0:00:22:F8
Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial: 012B
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa
Signing time: Sun 01 Dec 2024 01:03:45 +0000
ROA not before: Sun 01 Dec 2024 01:03:45 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58701
IP address blocks: 103.20.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710
Validity
Not Before: Dec 1 01:03:45 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=674bb5f1-0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:73:da:c0:67:b7:10:92:6d:ce:30:1e:19:
85:1c:97:3f:3f:cc:92:7b:25:54:bf:06:c4:6c:a4:
39:eb:51:79:6d:4d:95:d2:39:3a:49:aa:91:a6:78:
2b:f4:6d:50:b4:83:92:44:d1:62:1e:90:07:41:68:
a8:26:4e:bb:f0:14:e0:f6:ee:4d:2c:dc:4b:31:9a:
24:ad:81:32:30:f8:7f:0c:45:43:7f:26:85:47:54:
46:bb:eb:51:37:9e:51:dc:23:d7:8f:b5:3b:99:8a:
13:8a:3c:b6:ca:69:83:eb:f7:6c:74:06:38:77:9d:
81:70:01:24:d5:44:7f:cb:42:35:36:5e:09:63:d9:
b9:91:2c:92:e4:36:a3:cf:43:52:a7:48:d8:96:a8:
12:05:de:7d:6d:cd:b6:b5:a8:ed:cf:6f:dc:3b:9a:
89:d5:15:b7:9b:c7:da:ee:00:71:ac:cc:85:60:31:
06:50:be:12:9f:af:b1:d3:38:a9:80:2e:c6:d6:a9:
d2:cd:e3:62:a4:8f:62:60:d6:de:d5:f2:2b:41:85:
3a:03:82:b6:66:45:ec:1e:cc:58:e2:a9:b6:09:c7:
00:cf:25:74:d4:2c:03:90:c2:c2:15:20:ee:93:62:
11:6e:31:c4:4b:da:02:00:b4:9d:8d:55:ba:41:34:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:1B:24:00:41:8A:BB:E5:FE:97:AB:B2:63:FB:10:C0:00:22:F8
X509v3 Authority Key Identifier:
keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/99667AD4F83211ED97101D26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.89.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0c:31:72:8a:64:b1:57:bf:e6:1c:9f:0d:16:c3:ea:f7:16:
06:c1:e0:79:46:05:e4:73:08:41:d9:db:17:43:fa:fd:77:c0:
65:cb:fc:17:15:79:9e:aa:7d:e1:bf:e4:ce:ce:81:6e:d6:8d:
e2:c7:4f:ed:c7:b3:8f:35:48:4d:25:f1:01:94:ca:b1:91:b0:
ca:8a:94:e3:7e:8e:a3:02:66:42:a2:f5:a3:fe:53:71:26:6e:
17:c0:59:f1:ab:b0:66:a4:f4:c0:9e:ea:d8:33:d0:2b:2e:04:
e6:d9:65:ce:f6:f8:d0:5a:7d:2e:2a:8f:f5:ee:93:ef:42:70:
51:37:a2:67:d7:d5:1c:15:1f:37:9a:d6:e9:6b:4e:23:a8:28:
67:1d:f7:ba:cf:00:c7:6d:64:6c:3a:63:7b:ee:7d:4f:dc:aa:
fd:47:86:63:50:bf:eb:ef:c4:96:90:b7:1f:26:fd:ba:5c:1d:
fa:ac:8a:42:85:99:dd:75:28:ef:9a:57:57:dd:be:f1:ce:ee:
75:65:b7:2d:f5:22:64:f7:dd:46:3b:73:25:e7:6d:d6:b8:c3:
a2:47:6c:26:19:11:27:61:39:af:10:7e:ed:d5:f3:7c:d3:61:
ea:d0:2c:55:cf:70:29:45:77:97:58:de:8f:75:17:74:07:9f:
d0:19:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:04:13 2025 by rpki-client