Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
File: 13F5D28685B111ECB675B552C4F9AE02.roa (raw, json)
Hash identifier: wg979tEV/edC9z/60lEEUA1wH6+Atveb0Z20mtMK9/g=
Subject key identifier: 18:15:AB:F9:4E:A5:6D:56:E7:3B:AC:C2:07:53:9F:E8:F9:A4:B9:4A
Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial: 03BA
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
Signing time: Tue 25 Mar 2025 00:36:28 +0000
ROA not before: Tue 25 Mar 2025 00:36:28 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 134732
IP address blocks: 103.181.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC30
Validity
Not Before: Mar 25 00:36:28 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e1fa8c-1ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:56:84:56:ac:0a:04:64:eb:c6:0c:dd:4e:
64:fc:31:31:b7:d2:a9:1e:53:e7:ac:f8:7d:e5:bc:
0c:8f:14:9a:ea:03:af:63:5a:a6:6c:af:67:29:eb:
e9:0a:e1:b5:95:67:bf:27:a4:b4:3b:e6:d1:40:fa:
b0:9c:85:4d:c6:2d:c0:d6:97:03:79:9c:06:f0:4f:
d0:b8:55:f3:da:8d:57:40:d1:d1:46:9a:72:16:6b:
9b:79:c8:13:10:89:ea:e2:38:60:b9:0b:7d:b3:27:
e0:09:be:dc:7e:51:1d:c6:92:b7:f5:f6:57:12:5f:
bf:fb:73:95:07:61:6c:8e:9f:91:45:b2:76:cb:12:
66:35:1c:41:e6:8f:db:07:db:4b:3f:98:98:96:cc:
26:18:09:67:4d:32:01:77:cb:cb:eb:62:4b:db:6d:
41:c1:3f:27:91:31:ad:77:a5:45:18:7d:d5:0f:b9:
a0:b7:cb:88:26:cf:02:aa:28:5d:ef:04:f7:94:f5:
bb:26:6d:0e:aa:c4:4e:54:e7:72:f9:99:80:d6:1d:
3e:82:c8:08:9f:3a:78:78:13:b1:62:91:8b:6d:a0:
37:51:8e:ab:1f:96:22:63:d0:49:5c:b4:cb:97:5b:
6c:3c:27:10:0e:34:a7:5d:21:98:f4:4f:67:fc:83:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:15:AB:F9:4E:A5:6D:56:E7:3B:AC:C2:07:53:9F:E8:F9:A4:B9:4A
X509v3 Authority Key Identifier:
keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.42.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5d:30:fd:5a:e0:e2:1b:34:61:09:45:2a:46:bb:89:ec:55:
fa:79:a6:f8:f8:04:af:aa:72:dc:ad:6f:94:35:98:34:21:83:
61:94:07:44:bb:13:ed:dc:cc:62:4d:81:5a:39:d6:2f:ae:ff:
45:46:cf:27:57:8a:44:0e:d8:3c:bb:22:8d:9f:cc:f3:63:81:
ca:25:15:e5:bd:88:dd:15:26:10:6f:5f:02:4d:27:a8:24:29:
66:37:59:86:19:3f:b2:51:ea:b6:e9:ca:3c:2e:bd:6c:c3:09:
75:7b:ec:39:4b:4f:01:21:a0:63:8e:09:97:ee:12:b3:38:a7:
aa:8f:5b:58:8f:4f:9f:09:42:6c:ab:a9:a0:e6:e6:5c:72:4a:
37:52:a1:7e:f2:6d:5f:c2:eb:27:04:9f:e6:ca:9a:9a:16:a0:
57:19:3b:98:7e:87:49:37:b3:dc:41:8d:9e:2b:14:7c:10:cd:
a3:be:26:da:03:94:a8:e4:73:f5:51:7c:56:84:3d:d2:89:b4:
9b:14:ef:d5:cb:21:29:ef:fe:2b:5b:b0:39:3b:cd:2a:75:2b:
ce:52:43:54:2e:1a:bb:7c:ca:5e:df:92:0e:89:34:20:e0:cd:
f8:f2:71:2a:79:11:b5:01:f2:fd:34:dc:aa:bb:c9:17:ef:00:
e3:82:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:05 2025 by rpki-client