Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
File: E762B166FAF811EE92A3642EC4F9AE02.roa (raw, json)
Hash identifier: e/dOTjn5zjRzl7VVF4lYBqEjUR3aP4ajbLKyVpxXtqo=
Subject key identifier: 3D:B7:ED:EA:EC:C0:EA:81:55:A5:74:66:52:F1:82:A9:F0:74:12:C7
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 017B
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
Signing time: Thu 27 Feb 2025 05:27:23 +0000
ROA not before: Thu 27 Feb 2025 05:27:23 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 210542
IP address blocks: 103.83.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91
Validity
Not Before: Feb 27 05:27:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bff7ba-13a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:65:b9:4a:39:fb:0e:cc:c7:57:6b:8e:11:
41:ac:7f:ca:c1:b1:0c:94:95:95:61:58:c4:24:1c:
6a:85:b1:7e:40:55:fd:3c:2e:f1:ad:c6:c4:34:f0:
e9:e3:5c:c3:47:56:33:e7:96:84:f8:5b:7d:91:07:
f7:b9:0d:a9:16:45:b8:9a:3d:70:ed:51:10:b1:f4:
b4:02:33:55:94:7a:83:e1:49:2d:07:b0:9c:98:9f:
1d:93:99:c2:2e:eb:5b:01:61:ba:24:03:fe:8c:cf:
63:47:ab:2e:09:65:2a:9b:e4:ca:2a:25:60:d0:30:
7c:d2:a4:61:1c:79:c8:d1:25:5a:79:f7:e7:68:85:
27:69:34:5a:d6:bf:f6:75:0a:47:a9:58:7c:a1:c9:
d9:40:fc:a3:d9:37:3a:3f:18:6c:64:99:63:50:75:
c3:48:f4:8d:4b:55:5b:9a:62:cd:dc:23:d2:35:ba:
6f:3b:f3:af:f2:00:cc:18:08:47:c9:eb:02:80:a9:
3e:3d:2c:eb:f4:a5:1d:e5:1e:7b:b0:4d:b4:30:29:
99:d8:f7:a4:db:d3:a4:e4:f5:c4:f8:81:33:1a:95:
f9:4b:86:89:0b:ff:d9:12:71:c3:6a:da:ad:5f:58:
c3:73:aa:6f:49:63:88:cb:ac:58:c6:43:0d:b0:ba:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:ED:EA:EC:C0:EA:81:55:A5:74:66:52:F1:82:A9:F0:74:12:C7
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/E762B166FAF811EE92A3642EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e7:e1:c3:00:b4:6a:09:a8:28:ec:d0:86:7c:87:25:34:76:
1c:b3:05:9b:99:88:be:9f:42:a6:bd:bf:7a:32:10:25:eb:07:
26:17:62:2a:11:f8:cb:6b:e0:85:0d:8a:0e:16:30:b8:1b:81:
71:a1:9e:46:3b:71:d6:b8:2d:26:f9:4a:28:c3:f3:18:a4:3a:
0b:46:de:12:8c:68:4a:55:23:5f:bc:f3:a3:bd:cb:f9:8b:f9:
29:31:76:ac:c7:5a:0d:a6:14:a9:73:54:ee:e3:bd:b1:c0:28:
ec:07:a2:bb:30:a5:7f:68:e4:fe:58:55:19:8c:c0:89:02:4e:
df:86:31:c1:48:eb:c8:fb:27:92:7a:2a:2d:1c:3c:ca:81:6c:
ca:e3:69:a8:a7:0a:77:12:35:a7:a0:3c:24:e7:4c:7d:9c:fc:
0d:e6:10:0e:67:70:7b:6f:0b:6d:89:f5:58:9d:ca:22:77:33:
4d:b6:b5:aa:11:de:d9:69:7a:d8:3f:bd:4b:62:00:db:a1:28:
a5:4c:a4:72:31:05:1e:5d:90:24:67:ae:6c:d2:dc:5f:ea:2c:
6d:23:65:af:ae:bf:c4:b7:e9:ed:24:ae:dc:c8:f6:ca:7e:ea:
f6:be:2e:ed:f8:e1:33:6a:56:40:a2:cb:78:a8:46:17:f8:a1:
0a:00:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:14 2025 by rpki-client