Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
File: 0ECA16060C5911EFA8601E42C4F9AE02.roa (raw, json)
Hash identifier: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=
Subject key identifier: 3F:44:0D:A9:E7:90:B5:4E:0C:62:26:99:4D:4B:7C:F9:FF:0D:08:9B
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 03A3
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
Signing time: Thu 27 Mar 2025 01:06:51 +0000
ROA not before: Thu 27 Mar 2025 01:06:51 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137453
IP address blocks: 103.181.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB
Validity
Not Before: Mar 27 01:06:51 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67e4a4ab-9ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:4d:4d:97:3a:9a:91:e9:89:a3:ed:8f:e3:
2c:42:12:52:81:e7:2e:53:77:09:65:9b:fe:89:b8:
79:09:89:4b:4f:6e:b2:25:b6:26:a7:7e:f5:a5:15:
1d:7d:56:c2:5c:db:18:f5:80:e8:2a:d3:fb:2a:85:
f3:ab:86:80:cb:27:7e:b9:09:cc:6d:7f:7e:79:82:
ca:c2:68:72:d2:6f:da:8e:68:49:83:4b:0f:af:d0:
b4:17:61:bd:88:fb:48:56:f7:d9:8a:72:ce:ce:ed:
1b:58:2a:ee:b3:f1:e2:0a:05:f4:da:d3:c8:9e:61:
bd:89:47:a6:98:38:2d:cf:09:28:d1:a5:d5:94:33:
53:c7:91:cb:39:c4:a3:39:fe:1d:0e:3b:64:c4:b6:
06:28:7e:a5:1c:d8:d2:9f:34:f5:53:7f:00:76:7f:
4a:1d:91:9a:08:c8:63:2e:59:d6:95:52:31:bf:ca:
ce:54:2d:39:af:0d:0b:7c:68:3b:d5:3d:d0:20:16:
d5:25:09:c2:a4:85:1f:0e:9d:d0:24:41:4f:3d:b8:
1a:bc:58:ce:16:8b:5c:1c:86:79:00:df:de:dc:f8:
9c:7a:b4:29:87:aa:ba:00:9e:ab:96:56:6d:c4:de:
f2:69:ca:89:91:e8:ca:32:bf:93:c6:6f:c0:26:83:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:0D:A9:E7:90:B5:4E:0C:62:26:99:4D:4B:7C:F9:FF:0D:08:9B
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/0ECA16060C5911EFA8601E42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:bb:af:fd:66:63:28:40:c3:5c:65:8f:aa:9c:63:e1:c9:
ce:0a:88:29:e0:68:8f:99:d9:7e:0d:73:a7:7f:e9:cf:a4:f8:
85:3b:23:68:1a:ad:e7:26:76:77:e7:da:13:a8:31:78:a7:7f:
6e:cc:56:59:bc:27:c9:b4:a0:07:da:67:9d:35:fb:27:71:80:
a4:c6:91:fc:00:d0:b0:16:0c:b8:e6:fb:fa:e6:2d:53:d7:cb:
e0:fb:14:23:37:80:6f:18:6c:9a:43:ad:7e:16:ea:50:b5:a1:
37:de:f7:79:67:02:c2:f3:59:52:8c:03:c1:bc:a5:3d:45:fa:
72:80:6e:53:d3:49:32:84:29:b2:c3:1a:c8:86:30:aa:55:7a:
4f:4d:e6:e7:d4:1e:4f:cc:63:24:85:d0:eb:a7:ca:f4:c6:10:
b7:3e:0b:e6:4b:f2:fa:0a:23:5d:fe:d6:29:30:22:66:11:da:
7f:76:b3:a9:bf:0f:26:46:f1:26:da:fc:7e:09:d0:84:9c:02:
a4:79:e1:42:3a:c5:fb:ca:ec:0b:ba:7a:62:67:e2:c3:9d:68:
56:0f:12:ab:4b:db:0a:e3:4f:6a:cc:53:9b:32:db:3e:55:9b:
f5:85:e5:0b:9e:be:46:a3:e2:c1:1c:9c:9c:e1:e5:40:c2:ad:
fa:44:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:58 2025 by rpki-client