Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
File: 5B0EC1A03A6411EE954F7E1AC4F9AE02.roa (raw, json)
Hash identifier: 4kws2fw8AoZ1Rny+sed5EQnJfSosMC4foLTO1yizfJU=
Subject key identifier: 5D:64:7E:19:AF:62:50:5D:1E:A4:21:A5:66:F6:ED:7D:37:BD:3C:7D
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 0383
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
Signing time: Wed 17 Apr 2024 03:05:16 +0000
ROA not before: Wed 17 Apr 2024 03:05:16 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 149289
IP address blocks: 103.178.26.0/24 maxlen: 24
2001:df0:31c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428
Validity
Not Before: Apr 17 03:05:16 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=661f3c6b-9ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:de:42:72:e2:94:73:91:15:18:b7:5e:bc:
b8:04:9d:88:58:d8:d0:d9:06:cb:2d:e0:70:99:d5:
fa:1a:42:d5:80:d7:7d:3a:b7:35:26:8d:a8:e2:af:
22:81:19:f5:f3:4e:8a:3e:3d:d5:24:87:f5:2b:39:
c1:50:55:bb:35:22:91:92:70:3b:60:04:df:a4:df:
25:e9:9e:66:d5:71:53:6a:98:b7:bb:4a:4e:22:5c:
49:7a:d8:4f:5c:48:4a:44:4d:a1:a5:8f:94:60:d0:
b1:0f:fd:f2:53:aa:50:bf:cc:56:3e:8f:a7:28:27:
f9:b4:58:3d:81:e6:c7:5b:82:4a:5f:79:6d:2b:3c:
01:00:eb:25:1b:a9:42:c8:71:19:0b:af:ef:6f:1a:
b7:64:fd:cf:38:ea:18:fe:2d:5f:77:76:5f:df:84:
46:2a:59:48:96:a3:79:f0:ee:cf:4c:a4:7d:06:b9:
af:98:b9:15:44:d7:dc:83:cc:51:c5:d1:a6:d9:61:
13:f0:20:4f:39:e1:cd:9e:a5:53:9c:2c:ca:0b:91:
2e:67:5f:89:5c:52:b8:cc:66:c0:c9:c3:c6:31:61:
7d:92:d0:c5:b1:42:39:ee:88:38:82:6e:49:8c:06:
c5:60:02:a5:f9:89:4f:fd:cb:21:6d:fd:8a:4d:35:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:7E:19:AF:62:50:5D:1E:A4:21:A5:66:F6:ED:7D:37:BD:3C:7D
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.26.0/24
IPv6:
2001:df0:31c0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:61:e1:e5:ce:53:45:0f:42:d4:52:28:c5:7a:0d:89:30:9b:
d6:8d:8e:7b:ef:22:d8:a3:eb:58:db:79:cb:78:22:0f:ab:bd:
50:14:8e:8c:64:f9:d1:ce:ee:92:eb:03:2f:55:7e:11:cf:0d:
07:56:0b:63:54:15:d5:bc:93:d7:6d:7f:63:2f:20:aa:62:b1:
c6:25:01:0e:66:e7:7c:10:5e:ce:5c:14:41:6a:89:2f:b9:cc:
f4:e3:62:80:30:9e:dc:7b:f1:8e:52:3f:69:d4:d9:f0:65:e8:
fc:65:bc:b1:48:02:fc:3a:5f:68:6c:c5:1a:1c:15:21:34:27:
91:95:4c:1c:d4:ec:4e:11:41:ea:ae:a2:a2:8a:f9:d4:e2:2f:
62:a4:19:2e:db:dd:8c:51:40:0c:e0:ca:dd:ce:1a:da:dd:ad:
44:75:85:6c:28:b6:ad:64:98:39:5e:a1:0d:e0:bb:9b:16:e6:
9e:d8:f6:82:d5:60:92:94:43:c4:51:67:ce:16:29:a1:e5:6e:
1e:c6:67:46:28:64:40:ae:5b:16:1c:f2:0b:75:ad:df:e1:12:
3c:4f:b1:d4:8a:7f:f7:d4:23:36:ba:9b:0f:2c:5d:6c:a1:b0:
55:d9:d2:25:4c:53:41:fe:e6:27:de:78:ea:9b:cf:d8:db:88:
9a:1e:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:24 2025 by rpki-client