Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa
File: 45D16954A04E11EFB7A1FD6CC4F9AE02.roa (raw, json)
Hash identifier: ZDeuMCGn92bs4geP2myGIqJkxEeZZToab6ilA20tIVc=
Subject key identifier: AB:1E:CA:6D:91:CE:D1:29:BC:08:50:28:68:D6:E5:5C:5F:51:11:6A
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 0135
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa
Signing time: Mon 11 Nov 2024 17:31:41 +0000
ROA not before: Mon 11 Nov 2024 17:31:41 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 149023
IP address blocks: 103.176.246.0/24 maxlen: 24
103.176.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E
Validity
Not Before: Nov 11 17:31:41 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=67323f7d-6759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:82:27:b1:33:0d:52:23:f4:74:35:1f:6d:
5c:65:0a:32:dc:84:f8:d1:9a:2d:e3:c1:07:70:5a:
32:3b:20:48:dd:eb:20:10:3c:be:bc:75:98:c9:9a:
5f:b2:19:e1:72:02:b1:b7:09:e2:6b:05:29:2a:a6:
7c:a6:64:9d:c8:25:a2:32:a1:a0:83:5d:01:49:02:
a1:91:01:5c:2f:12:98:22:23:9f:34:72:6c:1a:43:
dc:06:ec:a4:da:7b:cd:70:9d:3c:3e:7e:28:77:63:
50:6c:52:90:8d:ab:79:68:b8:ed:49:df:f1:d4:21:
cb:a8:de:cb:63:6e:6c:ea:4c:7a:c7:0c:6b:73:cb:
07:ee:03:ca:3c:cd:f7:3a:63:30:a4:92:e8:d7:20:
5a:d7:06:e7:2a:52:6a:fb:a1:ba:51:b0:d5:15:11:
17:7f:71:65:d1:da:a0:60:e8:9b:78:a4:9f:36:3a:
6d:d0:1c:24:8d:35:71:1f:80:f4:42:98:c8:92:16:
e1:f8:0b:89:39:b0:d1:d8:6d:9c:62:9a:18:a4:68:
8a:8d:7b:63:ba:ba:13:f2:1c:14:c2:fc:98:72:58:
dc:b0:2a:d5:86:a6:f8:ed:1d:a2:2f:3d:da:e5:d3:
d1:8b:7d:45:53:d4:41:20:a8:d1:0a:6b:f7:42:be:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:CA:6D:91:CE:D1:29:BC:08:50:28:68:D6:E5:5C:5F:51:11:6A
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/45D16954A04E11EFB7A1FD6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.246.0/23
Signature Algorithm: sha256WithRSAEncryption
82:02:48:eb:1b:ef:e4:54:08:fc:b0:04:38:95:92:46:7a:f0:
c5:f9:92:65:60:70:85:19:17:09:ef:93:3e:a6:14:80:1f:df:
3d:15:96:c8:97:ab:b5:c2:4f:56:0f:1e:f3:25:8c:88:f3:c9:
0f:55:ba:35:22:5b:8f:1a:83:c2:c0:a8:21:08:53:99:ba:9e:
34:95:24:61:96:14:7a:23:35:a1:43:c6:78:08:e2:3d:f3:e9:
b9:29:d4:bb:91:40:dd:e2:71:83:82:59:d9:8e:d1:44:98:2a:
9e:22:c9:c5:df:86:43:bd:a6:4d:e4:bf:f4:73:ac:dc:6f:59:
18:c3:78:88:6e:64:b1:ce:9f:cf:bf:0c:4d:41:69:6f:22:27:
10:ad:8b:00:a0:e9:d4:8f:4f:ac:62:b6:87:af:4a:d9:47:32:
a3:0d:68:8d:d7:f7:f3:aa:62:c4:c9:76:a4:4f:2c:47:c5:65:
18:66:9b:e8:62:12:fd:69:f0:c4:42:90:9c:bb:5d:ba:b7:b8:
66:71:80:97:70:34:81:fd:c8:2d:07:ca:ae:02:d6:1d:95:62:
d5:d1:08:af:7f:83:b4:ae:4f:6b:2f:b9:be:38:d5:df:e9:84:
ea:e5:f8:1e:02:02:f3:5c:d1:33:17:65:a6:ac:0b:4c:1d:48:
67:19:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:34:56 2025 by rpki-client