Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa
File: 1D7E458ED3D011EFAF492E7BC4F9AE02.roa (raw, json)
Hash identifier: cfuG3Q6SxCv5NEHrNvBKgcm8n0lxZoatwiMQRslcJQQ=
Subject key identifier: 60:B6:6C:2B:09:95:8A:6A:8C:E2:39:9D:16:A1:06:5E:A0:44:0D:BF
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3495
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa
Signing time: Thu 16 Jan 2025 06:07:07 +0000
ROA not before: Thu 16 Jan 2025 06:07:07 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 215269
IP address blocks: 103.21.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13461 (0x3495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76
Validity
Not Before: Jan 16 06:07:07 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6788a20b-5457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:da:38:ee:63:42:ad:da:94:ae:d7:8d:c2:
d0:70:f9:ba:36:fd:5e:b7:92:32:af:f3:fb:e0:42:
66:d5:a7:b8:36:10:39:cd:ad:6e:c6:90:3f:46:60:
45:11:a0:6e:75:46:93:77:0a:69:a1:dd:53:1b:f5:
67:ea:bb:43:af:93:cd:9f:c8:d1:a4:2e:93:46:a9:
44:89:c6:ab:80:24:1f:09:4b:f6:86:45:7a:ac:86:
92:32:51:24:45:39:8e:e2:65:6e:b8:95:fa:78:a3:
26:08:cb:1d:aa:ac:53:c3:6f:fe:21:75:1c:bc:08:
b0:77:9a:5b:35:c4:43:32:57:68:48:c4:42:98:89:
b1:6e:ec:20:a8:63:db:ec:d0:9b:75:50:e8:82:7e:
d1:68:c6:28:fe:69:48:bb:ca:ea:68:54:0e:30:29:
5e:10:e3:93:fd:af:b0:dc:6f:fc:31:01:d5:8f:5c:
7b:8e:b9:e4:91:bb:e8:45:38:9a:84:b9:e5:4c:d1:
5c:31:5e:f7:03:7d:71:d1:01:ea:f5:08:47:3f:4b:
31:00:d9:c5:65:6f:9b:c2:cd:c2:72:65:2a:72:2b:
f9:49:73:e5:ad:7b:04:a2:11:e8:4a:78:8b:93:dd:
ad:95:5e:db:a6:a0:57:9b:5f:df:2a:02:0c:7e:1f:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B6:6C:2B:09:95:8A:6A:8C:E2:39:9D:16:A1:06:5E:A0:44:0D:BF
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/1D7E458ED3D011EFAF492E7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f8:63:b5:5d:56:1e:80:00:59:46:03:9c:be:d8:85:5c:21:
bc:fd:0d:17:55:ab:05:07:94:d3:de:75:f0:fe:f5:32:f7:de:
21:88:f1:de:cb:53:69:f9:1d:01:be:84:8a:41:de:53:be:84:
a7:9b:de:b8:ad:b9:72:07:29:83:24:f4:2c:8e:3d:30:51:de:
ca:43:f2:15:ac:d3:0f:9d:e4:7c:fc:08:1f:1b:00:b5:7a:71:
a8:6c:a5:35:90:8e:e5:83:b5:1b:4e:1c:f5:54:bf:55:b3:23:
10:c0:d0:ee:d9:0c:ec:43:70:4b:d0:05:2f:3c:9d:04:eb:39:
46:58:e1:73:6c:54:01:8a:1e:72:99:eb:56:8b:2c:ef:90:22:
e3:e9:7c:8e:1b:67:17:3b:16:c3:73:b1:d4:b4:f3:a2:81:e5:
49:b9:b1:30:22:0b:a8:bf:63:01:c8:6d:ae:71:4d:73:ad:72:
5d:c0:72:74:33:d7:fb:de:61:0b:90:11:6e:17:d4:ef:f9:a7:
4d:df:00:f7:63:c3:16:5d:ec:64:fd:b8:a9:eb:2d:8b:6f:40:
ae:a0:60:bc:92:a9:be:fc:23:e7:34:93:4a:92:b2:44:08:06:
f6:a8:0b:68:e5:42:ff:1a:f2:25:ae:dc:b0:bb:6b:f7:92:d1:
e2:6d:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:42 2025 by rpki-client