Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
File: C38C54A2650411EE89EC7112C4F9AE02.roa (raw, json)
Hash identifier: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=
Subject key identifier: 9E:BA:05:30:4E:8C:F7:C0:00:1A:E1:D8:A7:8F:B1:24:E4:A0:56:F4
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 0295
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
Signing time: Wed 07 Aug 2024 02:44:41 +0000
ROA not before: Wed 07 Aug 2024 02:44:41 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 142032
IP address blocks: 103.97.176.0/22 maxlen: 24
103.242.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579
Validity
Not Before: Aug 7 02:44:41 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b2df98-b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:fd:ed:86:a8:52:a4:56:83:fd:74:2f:27:
81:d9:4c:ea:91:a7:e9:b0:dc:f4:f4:5c:f9:8d:5c:
51:35:59:20:68:34:5c:77:33:b5:2a:28:fb:57:fd:
29:c7:e9:90:96:4f:17:a1:30:87:55:6a:58:10:cb:
47:05:f6:35:d0:35:13:c1:13:2b:1c:74:e9:da:c3:
b2:3f:c4:29:59:cb:1a:c0:9f:2d:3d:05:25:5c:db:
eb:a8:d8:e1:40:8b:5e:24:a1:31:a6:62:cc:00:3f:
40:1a:0b:68:07:bb:e4:72:d2:83:64:b1:aa:6e:83:
38:07:2d:56:0e:1f:c4:d7:d1:57:1a:c1:9a:95:16:
6a:27:24:43:83:16:6f:cd:8c:80:cf:85:08:2c:b7:
b1:71:8f:2d:23:c3:e0:23:78:5c:27:1e:2d:e5:40:
fb:fb:7b:57:00:91:fa:c1:17:ba:70:01:15:d0:4e:
54:79:98:2d:58:08:67:a8:d7:8e:80:34:04:12:1f:
ff:5b:2a:4e:d1:a2:51:de:e7:6f:ef:15:9c:2a:9e:
14:52:d6:b1:13:e8:c3:d9:90:80:cb:bd:88:70:ed:
3b:d0:cf:93:b8:f9:6b:fb:01:1c:74:74:06:85:c2:
d3:5f:6e:59:8c:fd:37:57:ba:b7:eb:bc:86:3c:89:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:05:30:4E:8C:F7:C0:00:1A:E1:D8:A7:8F:B1:24:E4:A0:56:F4
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/C38C54A2650411EE89EC7112C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f4:02:fa:d3:4f:46:ca:63:b1:40:2a:d7:99:ff:27:93:57:
17:e4:05:b5:6d:d2:e2:a5:ae:7b:09:01:0c:dd:a9:e2:11:f7:
c7:70:26:d5:51:eb:fa:25:1c:b6:ec:dd:d3:86:0c:60:30:aa:
fc:6a:e7:40:de:3c:30:7b:1f:59:dd:30:b1:95:b7:5c:22:25:
35:ba:c3:bd:c3:dd:a9:bc:4a:48:f6:ec:c6:70:8e:0f:c4:16:
c7:38:c2:f1:85:e6:18:b0:a7:a8:38:f0:3d:34:5b:19:6f:14:
33:b0:54:ee:f1:c4:30:35:88:db:12:d3:84:41:4a:64:d9:df:
bd:20:63:25:9b:cb:2e:c1:36:2a:c8:bf:60:78:d0:15:9c:dd:
c9:9f:ef:ec:43:fb:56:df:6e:66:9d:30:2c:07:7c:2f:14:50:
68:3c:61:89:a9:75:ec:51:48:aa:df:e6:8f:cb:e5:ee:95:68:
5f:1c:b0:da:5f:d3:97:7e:38:83:fa:f5:db:10:b2:65:49:6f:
20:00:4f:f0:d6:50:0a:f5:fb:7b:3f:d8:de:e6:f9:ac:db:f4:
f1:3a:14:83:90:63:41:8f:c7:2d:d1:9f:74:09:19:a3:ff:81:
27:da:18:50:a3:10:35:e3:63:9f:47:7f:5d:e2:e2:b4:45:f1:
51:57:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:52:27 2025 by rpki-client