Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
File: 388802BC067711EDA1DEB529C4F9AE02.roa (raw, json)
Hash identifier: EuoLXvibJYzVLshOhBvVYHJccoZUmB/oPyzL/sJ9KVc=
Subject key identifier: 8B:E7:80:3B:93:26:CB:BD:84:08:EA:1D:0E:06:25:73:4C:48:33:DD
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 01FD
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
Signing time: Tue 13 Aug 2024 03:04:53 +0000
ROA not before: Tue 13 Aug 2024 03:04:53 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134403
IP address blocks: 103.63.234.0/23 maxlen: 24
2001:df4:f400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9
Validity
Not Before: Aug 13 03:04:53 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bacd54-f3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:4b:df:98:26:6b:0d:7b:6f:0d:94:ee:b3:
0d:b7:c8:02:93:46:56:67:c2:50:ad:a6:6f:4e:fb:
5b:eb:8e:a8:90:3f:9a:3b:d7:49:d9:4f:99:ec:7a:
dd:e9:58:76:4e:83:13:c3:e0:85:07:f8:02:77:3a:
f0:c6:31:a5:34:1f:e7:61:84:ff:0f:4c:b2:bb:94:
d0:74:ea:4a:bd:a0:17:25:c2:9f:ec:65:7a:e2:37:
0f:9f:fc:07:9e:c4:77:f8:98:2c:ac:dc:89:ee:58:
c2:13:30:aa:07:c4:c9:16:9c:c7:3a:df:ce:a1:f8:
b0:42:42:d1:05:05:41:f6:a5:07:1d:9e:b0:34:44:
1a:99:36:4b:28:f7:fb:e4:43:be:63:04:19:16:9a:
3d:8f:35:fe:0c:f9:dc:2f:81:b8:27:9c:f8:0a:36:
2f:87:bf:85:a5:20:58:25:1f:66:ac:9b:a8:63:7b:
13:19:03:93:2f:14:fb:90:7c:ce:10:3b:66:e6:b4:
3b:46:83:4d:a0:b5:90:02:57:bb:6f:d1:17:7f:1f:
db:28:cd:52:9f:6e:a2:fb:3a:e8:b7:69:4d:cc:3f:
db:67:77:80:03:80:df:09:08:41:82:36:42:1e:ac:
d2:2a:97:f0:3f:2c:5b:7f:03:15:6b:58:d5:04:c3:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:80:3B:93:26:CB:BD:84:08:EA:1D:0E:06:25:73:4C:48:33:DD
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/388802BC067711EDA1DEB529C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.63.234.0/23
IPv6:
2001:df4:f400::/48
Signature Algorithm: sha256WithRSAEncryption
41:1d:07:6a:08:76:66:f8:d1:ac:9a:25:d8:10:6a:65:e7:2c:
f1:89:12:5d:46:71:9f:83:43:8b:7c:04:a9:79:b7:23:6c:0d:
be:28:bd:43:5f:c0:3b:9a:52:33:fc:7d:31:e4:54:f8:7e:7c:
38:df:2a:86:78:5e:a4:13:a3:6c:ce:89:99:3c:c5:26:13:05:
8b:ed:63:c4:69:6f:b3:e7:5c:b4:f2:91:19:e4:f0:a8:4e:0d:
f0:34:3c:6b:90:ab:d0:dc:04:30:5c:f5:89:b5:90:35:ad:03:
7a:8a:8c:1b:4e:52:c1:cc:f2:35:e2:56:12:c4:9b:17:83:b8:
b5:0b:0e:17:39:f7:1f:6f:03:15:73:36:19:6c:f1:f0:4f:7c:
73:08:b0:e4:0e:f0:1c:cf:c3:4b:f7:39:f8:0d:2b:9c:b6:78:
63:ed:bc:7b:c6:74:45:a7:3d:9c:3f:3a:78:37:f6:c1:46:51:
20:a1:03:17:e7:1f:b3:ab:96:60:88:c1:c6:87:1b:0c:5e:68:
11:68:da:72:9d:f2:60:c5:de:97:3c:1f:a2:1a:96:24:1f:72:
4c:ac:4b:96:e3:f3:0b:39:3f:1d:c2:9e:9e:be:a5:16:3c:ef:
f6:2c:0e:1a:f9:5e:64:8c:65:57:1f:8c:9f:db:02:90:2d:18:
75:52:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:22 2025 by rpki-client