Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
File: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (raw, json)
Hash identifier: jV7pTLLQPAskIihyf9Dp12RJ84TcLdZjS7I4GkFqPvA=
Subject key identifier: 9B:74:DA:F4:B9:86:4F:14:A5:31:A4:B4:23:70:F0:95:33:17:DD:B7
Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
Certificate serial: 02
Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
Signing time: Thu 12 Sep 2024 01:40:08 +0000
ROA not before: Thu 12 Sep 2024 01:40:08 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134080
IP address blocks: 103.51.159.0/24 maxlen: 24
103.211.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6799
Validity
Not Before: Sep 12 01:40:08 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66e24678-3a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:58:23:e0:0d:90:31:e7:de:d0:3a:1e:64:
f1:ce:ec:38:6a:22:84:62:f2:6b:94:e7:2a:05:bb:
d6:27:cb:cf:52:90:dd:9d:22:88:86:c1:56:22:34:
3d:ee:a3:ee:a1:d6:e0:89:42:bf:02:eb:c6:b4:dd:
4d:c9:9e:6e:85:5f:c8:87:2f:28:72:fc:77:0b:a5:
2a:68:9f:6f:5e:72:34:b5:2c:7e:ca:92:f3:bf:dd:
15:42:05:0e:e0:35:e7:01:2f:54:ce:ac:24:29:e5:
ab:ea:51:fa:00:1c:f2:a8:36:46:20:12:ed:85:a0:
0f:ee:e4:92:4b:ab:f1:35:d6:1a:ef:c1:5a:8e:05:
ac:01:fd:cf:6d:d4:31:ae:15:38:1b:8c:52:d1:60:
cb:b0:69:86:71:e8:71:97:da:50:0a:55:3e:f7:24:
02:2b:7e:4f:7d:e3:7f:43:6c:58:4f:d4:67:a7:e5:
0f:7b:c2:89:ab:d0:11:8a:d3:49:59:53:12:e4:33:
3b:29:75:70:ac:cd:36:8a:10:05:50:45:94:37:55:
c1:eb:69:7c:1a:e7:ad:66:9c:d8:9b:43:42:71:f2:
3a:df:4e:8b:de:71:04:ba:f7:61:9c:f6:7a:de:fe:
b8:6b:ca:59:1a:43:b1:c0:ae:6e:6d:95:ce:aa:ca:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:DA:F4:B9:86:4F:14:A5:31:A4:B4:23:70:F0:95:33:17:DD:B7
X509v3 Authority Key Identifier:
keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/F13B6A3C70A711EFBA8AFF10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.159.0/24
103.211.199.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c9:dc:87:c4:45:44:4a:4a:bc:32:a3:ea:c8:22:40:70:cc:
90:fe:83:91:6e:32:3e:60:e9:89:9e:c5:65:12:67:7d:3a:90:
3b:ba:c8:14:86:0c:51:2c:c1:a5:13:16:ef:3c:2a:62:e5:b2:
ae:58:93:a7:5b:b3:90:19:2c:4d:40:4d:c7:54:71:60:df:b3:
6a:27:2a:a7:3a:11:c6:36:1e:22:89:03:a0:fa:fe:ce:65:77:
1b:55:4c:c7:7f:b9:50:eb:c2:bd:3a:36:c4:6d:cf:a1:68:88:
56:73:93:7b:f6:c8:71:b4:ac:56:7c:d0:95:b1:aa:4b:2a:7c:
b3:ae:6c:e7:b4:8e:ab:eb:44:f0:73:e7:22:73:e6:91:d5:91:
ff:a3:ea:83:bc:27:1c:d8:13:4a:dd:ec:f7:7b:b0:ac:08:19:
c9:7a:87:bd:e5:27:45:48:f1:34:0d:e3:ed:68:f3:16:de:1d:
c6:2e:bf:bc:29:24:e5:40:aa:7c:36:c5:a9:0e:36:0b:fa:b9:
9b:80:3c:b1:e1:71:4d:c8:99:01:ac:c3:2e:b1:9c:a4:84:a7:
ef:17:4f:8a:59:39:47:d8:57:4f:01:d0:5e:74:c8:17:1e:f1:
64:28:ad:f7:56:d1:86:b7:da:8a:cb:3f:9b:b6:b3:db:8f:02:
29:96:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:51:02 2025 by rpki-client