Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa
File: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (raw, json)
Hash identifier: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=
Subject key identifier: 20:6B:EE:D9:21:12:6D:CB:58:94:4D:39:3C:3B:6F:95:E3:97:08:8D
Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial: 0360
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa
Signing time: Mon 03 Mar 2025 02:55:31 +0000
ROA not before: Mon 03 Mar 2025 02:55:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149522
IP address blocks: 103.182.122.0/23 maxlen: 24
2400:5ce0::/44 maxlen: 44
2400:5ce0:10::/46 maxlen: 46
2400:5ce0:18::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F86D2
Validity
Not Before: Mar 3 02:55:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c51a22-53d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:d4:fc:9b:a1:37:cd:2d:a6:e2:23:fb:4d:
bf:2c:06:a4:e5:34:67:be:ca:06:80:15:af:ce:f1:
18:49:3c:d9:1a:9f:b8:ff:14:8e:1b:88:54:38:f7:
1e:dd:da:a8:f3:ce:54:0f:ac:ac:c6:69:72:30:2d:
81:1f:59:fc:79:1a:e9:41:b6:41:b1:b0:1f:0e:d4:
87:1d:22:96:9b:5c:12:15:30:e6:38:ae:9c:dd:79:
48:3a:2d:26:a9:1c:8d:fb:63:5c:e1:24:04:7e:75:
80:24:6b:44:14:62:78:e5:c3:b7:61:3c:33:64:61:
51:49:2e:cd:3a:c2:16:ca:ff:34:47:06:87:6e:7a:
9a:73:88:86:f3:ec:d7:45:b7:04:c0:62:b8:53:eb:
ee:a0:4b:09:b3:20:1b:45:a1:58:04:af:43:e8:9a:
07:a3:db:5b:1e:42:c2:53:23:ad:fc:0f:d9:d5:81:
82:f4:2f:0c:4a:9e:66:2f:c7:06:08:f2:50:b0:2e:
05:ff:a0:23:cf:4c:6f:61:6b:eb:39:96:1e:21:11:
d9:94:7b:1a:ae:c1:95:a5:f9:b6:dd:eb:34:da:02:
5d:b7:01:d1:84:64:d5:9f:ce:4f:96:a6:32:bb:c9:
34:96:f5:a2:66:92:48:33:79:e6:0a:2f:c1:25:96:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:EE:D9:21:12:6D:CB:58:94:4D:39:3C:3B:6F:95:E3:97:08:8D
X509v3 Authority Key Identifier:
keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/1A377B907A7811EF9D5ED47CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.122.0/23
IPv6:
2400:5ce0::-2400:5ce0:13:ffff:ffff:ffff:ffff:ffff
2400:5ce0:18::/45
Signature Algorithm: sha256WithRSAEncryption
78:93:74:f5:4f:a2:13:90:d2:44:bf:79:d8:b6:b5:a7:7f:d3:
5a:b6:ca:a2:30:68:63:7e:af:da:19:e6:40:6b:b4:96:cf:cf:
5a:8a:79:75:2c:0a:16:ea:be:46:7d:77:bd:89:3f:9d:ef:31:
68:35:f3:de:c3:63:40:e3:5f:2b:f4:ca:fc:81:49:74:d1:6d:
fa:8f:b5:17:dd:73:f3:87:d5:38:b4:85:4d:50:07:78:1c:e7:
3f:87:87:2f:5d:a9:63:cf:6c:bd:37:fa:98:bb:48:de:8c:09:
04:7d:4f:ef:d9:95:cd:63:83:6a:0d:d5:6e:89:47:a4:f1:d3:
7d:95:66:c6:c1:83:27:6d:e9:f2:e0:cf:e0:1f:04:d7:17:53:
28:ed:b0:02:f8:92:8f:8f:15:b4:89:e1:db:b4:06:21:0a:21:
14:80:72:22:a8:6f:53:0c:a6:4f:ae:c7:36:bb:7c:2e:93:4b:
81:3c:0f:72:33:7b:80:a4:16:6a:f2:7e:5c:34:00:97:60:7d:
6e:f6:45:ae:73:cf:9f:f1:3b:fb:d8:11:c9:e5:77:aa:a7:bb:
bd:81:82:22:1d:98:69:b2:5e:21:0c:12:64:c9:33:84:7c:6c:
7f:43:21:82:e4:5e:58:74:0c:6a:67:17:0c:c5:e6:4b:8c:24:
3d:10:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:04:03 2025 by rpki-client