Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/E120E32E316111EEB9B76E4CC4F9AE02.roa
File: E120E32E316111EEB9B76E4CC4F9AE02.roa (raw, json)
Hash identifier: x3JJ5fywP75b0VuxKMEwbNWWTXHH7l+L5PLPkPQYjmY=
Subject key identifier: 38:91:60:54:3D:F2:79:52:95:58:55:33:80:B4:67:CE:B3:FF:CE:AE
Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial: 07AD
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/E120E32E316111EEB9B76E4CC4F9AE02.roa
Signing time: Thu 28 Nov 2024 04:43:19 +0000
ROA not before: Thu 28 Nov 2024 04:43:19 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 151620
IP address blocks: 103.155.27.0/24 maxlen: 24
103.156.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5230
Validity
Not Before: Nov 28 04:43:19 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6747f4e7-57d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:82:9a:33:aa:17:23:7d:3b:e8:38:20:16:
e6:e2:6d:ed:15:e1:45:35:c6:13:18:62:6e:31:d2:
5c:d6:c4:fe:d6:f2:45:10:73:12:34:a7:ce:02:95:
e3:92:28:9c:85:e1:d8:81:f0:67:4d:21:37:0a:4a:
43:3f:0a:74:2d:af:bf:c4:b4:5b:d1:33:cd:12:87:
67:80:2e:30:5c:0b:7d:ef:6e:81:4e:48:c4:b0:55:
c8:ac:c9:d5:69:2b:82:59:2e:90:dd:4e:3e:1b:ae:
fe:da:2c:af:76:2f:0b:1b:2e:73:ea:4b:bb:a4:5e:
db:46:d1:55:39:a1:31:29:24:db:37:12:cc:91:de:
69:d8:25:98:77:61:0c:80:c8:c2:4f:24:d5:87:2c:
64:63:60:43:27:e0:d7:62:45:96:29:03:c2:88:d1:
df:35:7d:b2:da:f8:08:66:d3:e1:c0:75:61:6a:01:
d0:1c:03:b9:e8:35:e2:4e:b7:7f:59:48:13:f1:8f:
68:09:23:0b:87:2f:de:7f:cb:ec:d0:f3:1e:7a:96:
d2:9a:fc:41:9d:dd:8e:79:fc:11:46:8a:24:9c:72:
3d:e3:6a:87:00:10:05:95:1c:d0:93:82:21:d4:78:
0e:8b:f0:9d:87:14:aa:fb:96:f3:27:58:37:42:3d:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:60:54:3D:F2:79:52:95:58:55:33:80:B4:67:CE:B3:FF:CE:AE
X509v3 Authority Key Identifier:
keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/E120E32E316111EEB9B76E4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.27.0/24
103.156.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0e:d9:2a:4f:26:dd:f2:c6:4e:86:93:bf:3f:a5:a8:62:07:
b8:25:3f:67:b7:a5:ec:b4:2c:c4:c8:e9:e3:5d:8d:f7:d7:e8:
51:46:75:5a:3b:c1:0e:90:af:a9:8e:2d:81:9b:1e:8f:20:d6:
4f:77:2d:16:a9:fe:2e:aa:d0:0a:90:6c:6e:72:cf:b4:12:ef:
5e:3c:fa:92:2f:70:a4:3e:88:16:05:e8:a1:fc:fd:37:f4:ac:
42:d4:cc:5b:11:9c:43:21:6b:19:5a:e9:79:fd:de:fb:0c:5e:
2a:4a:85:28:9b:6f:c8:1c:0b:fe:3d:c0:cd:a1:bf:9b:5d:73:
e4:e7:8e:17:d5:ca:08:6b:4e:ca:2d:28:04:b6:17:8e:82:57:
07:a8:0f:3a:4c:91:e8:ab:42:67:18:3b:e7:05:80:b3:61:81:
37:14:2e:39:42:d5:ed:c3:92:8f:5b:be:73:68:d0:43:b1:87:
04:ca:64:95:0c:e0:6e:06:8a:67:63:c0:d9:ad:1f:21:cc:76:
31:29:a5:e6:4b:3b:c8:e2:c8:93:cc:c4:5d:84:1c:fb:7b:2e:
fa:0f:3c:de:6c:59:38:f1:4c:d0:09:65:b1:6c:9f:7b:2c:3f:
5c:76:4f:b7:19:d9:f1:91:2f:1d:86:bd:96:ae:d9:d1:d5:25:
9c:a4:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:43 2025 by rpki-client