Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
File: 6091D05229FC11EB861CCA7FC4F9AE02.roa (raw, json)
Hash identifier: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=
Subject key identifier: 7B:30:D2:8C:2C:11:1D:FF:23:E6:B8:AD:BA:30:61:C1:7A:49:35:90
Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial: 06EC
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
Signing time: Wed 04 Dec 2024 21:40:49 +0000
ROA not before: Wed 04 Dec 2024 21:40:49 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139751
IP address blocks: 103.158.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772 (0x6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D536E
Validity
Not Before: Dec 4 21:40:49 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750cc60-f856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:2f:6d:c3:7d:36:63:a6:d8:f3:c4:d9:39:
4d:a7:c0:20:56:48:7d:23:3f:aa:67:11:04:65:85:
93:41:6e:71:ca:aa:aa:04:6d:87:b0:32:1c:3e:8f:
f2:38:ea:2c:be:b0:3f:3a:08:f0:10:3c:d7:c5:9d:
33:64:e6:bd:ea:ef:4f:93:05:c1:6f:85:49:52:8a:
6d:ed:4c:27:3e:52:93:ae:ee:52:9c:d2:4a:8a:7a:
66:f1:01:4c:a7:16:92:c0:74:b1:2d:aa:e0:85:10:
3c:20:26:06:f6:cb:06:73:26:ac:e8:a7:b0:4e:20:
76:ec:95:56:ac:e2:19:21:17:3a:b9:49:a1:e5:d5:
7b:c4:7f:66:a1:99:20:1b:53:4f:b5:0d:fa:c6:18:
61:c8:8b:1e:29:21:12:cb:24:46:96:66:3a:6e:a0:
f8:31:7e:81:f9:37:7c:dc:b1:31:f0:30:17:de:56:
bf:46:7a:0e:42:60:4a:4e:ee:5c:3b:65:58:90:02:
5a:ae:b5:f0:fd:d4:a8:51:5f:36:00:9e:d1:e3:a5:
06:33:60:d4:5a:37:92:3b:f0:58:ee:0e:10:41:d3:
ad:84:3c:eb:10:6b:08:1b:39:75:df:a3:3c:8f:e2:
94:37:bf:a1:59:e4:75:e3:f5:34:d6:44:fd:f5:bc:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:D2:8C:2C:11:1D:FF:23:E6:B8:AD:BA:30:61:C1:7A:49:35:90
X509v3 Authority Key Identifier:
keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/6091D05229FC11EB861CCA7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.34.0/24
Signature Algorithm: sha256WithRSAEncryption
26:aa:61:f8:f1:dc:c4:68:6d:fb:d0:a7:9e:8f:17:63:5c:55:
1b:ed:a7:47:89:a5:8b:dd:25:25:39:05:96:fb:c1:85:7c:1b:
b4:f0:68:79:17:12:a4:55:59:6f:71:96:2c:51:47:3f:8c:ac:
33:ab:08:da:33:23:e9:5a:dc:d0:52:72:1c:b7:f1:ab:ea:13:
c7:ad:67:c0:e1:92:3e:62:ae:f7:d1:e6:72:2b:95:df:62:4b:
8b:a3:77:6c:6d:2b:e5:ea:40:33:16:5d:2b:e2:4a:f0:0c:fc:
a8:fd:e4:dc:b2:0a:d4:39:b8:9e:d1:a1:5d:9c:47:4a:b2:bf:
62:39:b6:93:32:ba:5d:d6:4f:90:4e:21:78:fd:1a:87:c0:0c:
8b:c4:d0:0d:a1:b1:98:5f:70:1e:20:02:f3:f2:8e:43:13:cd:
f8:6c:76:87:8d:a0:ef:62:73:56:54:5a:67:f3:63:25:ce:24:
eb:57:73:73:42:f1:c0:b4:3e:c2:10:48:4c:ac:12:b4:4a:ca:
3f:96:fb:42:eb:b3:62:8b:f9:b3:c9:c7:03:82:7c:8e:d3:de:
59:6f:29:e5:36:0c:87:34:2c:06:ba:26:f1:96:b6:42:77:83:
82:f4:21:88:4e:b7:56:e0:83:04:2b:32:e8:22:1a:da:f8:02:
32:d4:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:57 2025 by rpki-client