Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
File: A87755B68BCD11ECAF9D1512C4F9AE02.roa (raw, json)
Hash identifier: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=
Subject key identifier: 0C:08:C6:57:66:23:C3:6C:0B:99:9A:2C:F4:71:8E:F4:2A:46:67:0F
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 03A4
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
Signing time: Thu 27 Mar 2025 01:06:44 +0000
ROA not before: Thu 27 Mar 2025 01:06:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149508
IP address blocks: 103.181.122.0/24 maxlen: 24
103.181.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672
Validity
Not Before: Mar 27 01:06:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e4a4a4-cc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:4f:4c:2f:fd:cb:2c:07:bf:2f:fc:c6:d3:
65:87:06:f5:e1:0d:ad:49:d7:63:98:62:67:ad:ea:
19:62:da:81:bd:a7:5a:5f:09:e5:41:d6:70:83:fb:
20:72:3c:9d:2f:46:f8:68:78:c3:be:8f:ca:8e:18:
ba:25:e8:ff:ae:b5:6a:d2:53:1a:5c:1b:de:81:b4:
b9:b3:83:75:bd:5c:f7:88:ad:a2:96:77:56:69:a2:
da:23:fe:09:56:7a:b9:cd:ba:57:2a:2c:40:7c:2d:
29:b2:96:6a:f5:ad:cd:a2:c1:e7:49:14:77:42:69:
9c:fd:cf:44:e8:c5:83:7e:96:6e:6e:e0:aa:67:7d:
74:c1:12:85:2a:22:b9:b5:a0:9d:e2:a9:80:a7:e3:
81:64:8a:61:78:0c:42:dd:76:ac:fd:38:6d:4a:a1:
76:e3:28:82:94:57:2d:f6:d4:1c:86:87:93:e4:d0:
86:5c:05:96:74:82:d2:c9:40:aa:40:a1:6d:02:2d:
3f:5f:fb:b1:0b:2e:5c:06:52:49:8f:f4:15:66:e9:
82:c6:06:a2:03:73:24:79:7e:c7:0f:a3:42:e8:50:
02:3c:f5:fa:c2:f8:9b:82:95:b2:05:14:eb:c0:9e:
31:4c:7b:40:e5:9a:c3:5a:ff:09:9c:21:85:9c:a0:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:C6:57:66:23:C3:6C:0B:99:9A:2C:F4:71:8E:F4:2A:46:67:0F
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/A87755B68BCD11ECAF9D1512C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:63:2e:35:16:6a:b8:07:d9:66:70:92:08:c5:17:92:de:59:
ee:ea:23:2b:2d:d1:3e:92:e2:16:25:b6:9a:7c:98:43:10:64:
60:af:e4:a5:be:97:4f:d0:2c:2b:20:38:c1:69:34:17:18:62:
e3:f5:27:ff:b3:c8:b8:a7:06:d5:a2:eb:9b:1e:51:c5:c2:dc:
d0:8a:4c:98:5a:aa:9d:29:27:84:8d:aa:0d:e8:44:40:08:f2:
8e:b0:e7:d5:30:d3:f1:b1:95:3d:87:4d:cc:76:58:7a:1b:12:
29:57:f3:c7:9d:8b:1e:45:85:26:03:5e:21:fe:a4:28:18:91:
d4:f5:53:93:a4:8a:ad:bc:e7:b1:2d:62:a2:f5:e2:7d:74:c6:
c7:18:26:dc:01:ee:c4:bc:f5:eb:d5:ad:82:fb:e7:80:d3:a6:
97:fd:8c:91:aa:53:fb:1b:50:5a:fc:56:0d:fa:24:56:94:0e:
73:20:17:a7:de:a3:5a:a2:68:8b:5e:c2:91:d8:93:f1:78:67:
c3:98:32:03:13:67:74:e9:a1:32:9d:be:da:5c:4c:c1:0b:a3:
5f:0e:50:49:c3:d5:a8:3e:8e:c6:8b:4e:e4:79:76:99:01:b5:
d0:46:44:55:d7:9e:3c:4f:cf:75:7e:99:af:f5:e8:47:b3:f2:
0f:e6:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:16:26 2025 by rpki-client