Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
File: 5741EB0A159311EFA0CC790BC4F9AE02.roa (raw, json)
Hash identifier: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=
Subject key identifier: EF:5E:42:46:8B:E3:04:6A:63:06:73:01:02:62:F6:80:E6:ED:F3:56
Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
Certificate serial: 03
Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
Signing time: Sun 19 May 2024 03:53:24 +0000
ROA not before: Sun 19 May 2024 03:53:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136399
IP address blocks: 103.160.10.0/23 maxlen: 23
2401:a020::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1511
Validity
Not Before: May 19 03:53:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=664977b4-1687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:cd:f0:6b:51:ce:2c:95:51:27:3b:fa:12:
80:8d:cf:ed:09:4a:c0:52:64:9f:fe:76:6c:b6:5a:
96:a7:97:79:0c:9e:ce:27:46:b9:0c:c8:9e:71:93:
f9:04:1e:90:f4:00:d5:82:59:93:0d:11:9d:e5:3f:
4f:aa:23:a5:9a:0f:94:50:bb:e0:82:72:55:c5:85:
23:2a:4a:57:d5:7d:6c:b9:ef:01:f6:2e:d8:05:45:
7f:51:92:55:45:5a:0e:76:c7:f1:5c:61:db:35:7e:
bf:8e:b3:68:0d:66:77:09:28:57:b7:12:8b:70:cf:
6a:f2:d6:25:50:3e:14:7b:35:4e:ed:38:3a:c1:71:
fa:fc:6f:34:8a:44:ad:90:e9:ee:85:29:3a:8a:26:
07:25:56:9d:4c:d2:4b:5c:07:31:d3:3e:75:2e:51:
5e:b5:8d:bf:3d:ee:94:3a:04:6d:e0:41:d9:c7:3d:
c0:5f:10:1b:85:db:ff:c9:55:c0:d0:52:85:f9:c4:
35:be:06:3c:a9:28:a0:ec:47:e4:39:aa:74:b7:67:
c4:b8:03:04:b0:8f:af:9a:a8:4d:91:01:66:fc:3d:
8c:83:d9:30:28:f5:fc:12:d6:45:01:06:a6:4d:06:
3b:12:c3:f6:dc:8d:54:7e:41:11:0c:55:ee:17:9b:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:42:46:8B:E3:04:6A:63:06:73:01:02:62:F6:80:E6:ED:F3:56
X509v3 Authority Key Identifier:
keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.10.0/23
IPv6:
2401:a020::/32
Signature Algorithm: sha256WithRSAEncryption
22:2f:c9:30:9f:e3:2e:fb:5b:0a:9c:e8:b8:57:59:93:8b:7b:
f1:9e:9b:35:91:4b:7e:a1:36:f8:03:03:1d:49:16:f7:0e:e4:
d1:cd:4b:95:a4:45:b2:0d:7d:eb:84:79:cc:65:39:69:9d:7a:
36:75:3b:54:04:94:41:c7:56:61:80:27:89:b1:45:fe:86:98:
7b:ef:2b:45:80:a3:c2:d1:a6:03:d0:57:6c:74:33:a3:dc:e8:
05:f4:a3:71:4f:1d:f8:4b:70:d9:06:c0:17:cd:9f:93:1e:59:
3d:5b:48:bd:ff:43:02:3c:d4:7a:6b:70:d1:0f:93:8f:ef:64:
a6:b5:39:ab:64:7c:cf:58:a0:05:8d:e8:fe:4d:b7:36:26:53:
55:97:bb:5e:f3:b5:da:fb:44:10:30:ca:79:a6:75:ae:4d:6d:
95:69:b5:40:97:08:ca:aa:0e:f3:2b:c5:c5:23:52:1a:1b:32:
5f:88:a5:87:dd:87:24:ce:ea:ec:67:aa:66:e2:0f:7e:7b:a3:
30:70:65:17:ff:f0:6f:08:bf:e3:9e:29:3c:c0:5d:3e:fd:2a:
e0:f5:f4:31:23:e5:95:06:9b:5e:e3:0a:52:ad:f0:c9:7a:a6:
76:2c:69:fa:1a:9b:38:21:51:5b:ff:47:ca:4c:8f:3f:68:79:
f2:45:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:53:14 2025 by rpki-client