Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
File: C559313E86B511EDA0A79119C4F9AE02.roa (raw, json)
Hash identifier: g7WEDLjl04ufY+/6PZL9wcYVjjeP1B8Tm2IWxVCkn0w=
Subject key identifier: 0D:0D:9C:C3:EE:5B:6F:1F:3B:9F:C6:48:82:BE:38:9C:09:55:81:14
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 18
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
Signing time: Wed 28 Dec 2022 13:44:38 +0000
ROA not before: Wed 28 Dec 2022 13:44:38 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138197
IP address blocks: 103.29.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C
Validity
Not Before: Dec 28 13:44:38 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63ac4845-15e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:61:51:61:a8:d5:a8:b5:7f:c0:cb:e2:3c:
27:2d:00:c0:9b:97:8f:10:ae:d4:c6:35:c5:4d:46:
60:8d:7a:82:09:3f:af:91:8d:9a:37:99:b6:28:0c:
97:91:9d:68:23:f6:62:24:9d:f8:d4:8f:a2:97:1a:
25:ce:32:76:e1:74:e7:48:7c:74:fb:67:ac:b3:1a:
a0:d4:db:88:9c:b2:5f:6e:3a:4d:36:93:a8:04:31:
a1:ef:b7:7c:d2:ce:69:9c:7c:87:eb:bd:a2:b7:36:
6e:09:df:e6:66:49:d6:dc:a2:11:4a:43:f9:d3:20:
f5:18:0e:14:77:47:fa:d3:52:be:00:d2:f3:7e:91:
dc:be:8f:97:53:4c:ad:a2:da:3a:b4:ca:13:49:f3:
35:a9:12:ca:e7:cf:66:4c:71:9c:c2:6b:75:cc:1d:
4a:1e:c1:f2:e4:53:84:4c:db:84:c2:3e:d0:53:9e:
95:5c:b3:95:1c:56:2b:26:fe:a2:d8:d3:72:44:b8:
55:83:aa:c3:23:b9:fe:62:6f:64:d1:3d:e0:35:22:
ed:e7:21:4e:13:3c:6c:a8:62:04:82:87:91:00:b6:
ce:1d:b7:08:e9:96:f3:ea:4f:ae:08:5c:09:2b:25:
14:14:b0:24:94:16:f8:cf:22:ac:fd:9d:6e:23:27:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:9C:C3:EE:5B:6F:1F:3B:9F:C6:48:82:BE:38:9C:09:55:81:14
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
20:56:77:60:45:12:02:bf:2d:b8:11:ff:38:4e:e5:3e:df:2c:
74:44:5a:f3:4f:50:6a:2f:3b:5a:72:43:8f:f8:ca:65:00:a1:
f3:92:ca:1a:b5:a9:94:ed:90:7a:cf:3a:35:33:c9:83:d5:ae:
ab:f0:9b:b1:0f:63:45:8a:e6:f9:43:da:6e:01:d5:6b:11:6f:
d8:ff:f6:b6:5b:33:ed:2a:90:dc:de:74:d7:22:1d:d4:cc:f8:
71:d8:b1:2b:32:76:d7:78:03:13:3d:4a:b1:63:8e:db:44:5d:
94:2a:c9:df:0d:5c:17:8b:8e:ac:62:14:72:b3:21:bc:db:48:
c8:24:eb:7a:07:2c:c0:bf:2f:7b:c1:65:bc:ce:79:5a:16:ca:
a6:8f:eb:8b:4b:bf:b8:f6:09:a9:4c:f8:ff:e6:1d:ec:dc:35:
30:27:ca:9c:58:2c:44:70:c1:2a:3e:78:73:28:11:af:32:16:
45:5e:ee:d5:58:05:15:72:e7:9d:37:3b:1a:ba:1a:08:59:bf:
af:dc:5f:cc:15:ff:10:84:3b:d1:be:7f:fd:7d:4b:b0:7f:d5:
04:ce:59:3f:41:31:26:11:1c:0d:29:fa:f3:e8:1f:d5:72:51:
37:05:49:1f:ea:21:ba:d6:04:99:a8:c7:97:02:8c:66:f5:43:
40:70:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:00 2025 by rpki-client