Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
File: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (raw, json)
Hash identifier: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=
Subject key identifier: 79:2C:85:F4:B3:66:CE:2C:10:34:99:1D:FF:FB:A3:7B:0B:BA:91:C2
Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial: 078C
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
Signing time: Thu 26 Sep 2024 21:20:16 +0000
ROA not before: Thu 26 Sep 2024 21:20:16 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140993
IP address blocks: 103.154.156.0/23 maxlen: 23
103.154.156.0/24 maxlen: 24
103.154.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330D0
Validity
Not Before: Sep 26 21:20:16 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f5d010-36b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:6e:ea:d4:7b:4b:ca:37:60:25:75:e0:39:
13:0f:53:5e:5b:0b:b6:19:2f:be:b0:7b:5c:06:49:
21:c6:83:83:0b:e2:de:0c:02:9e:5f:c2:55:08:9e:
67:ad:25:f9:65:95:ef:da:e2:1e:6e:a6:fc:bb:2c:
a6:10:ce:db:b8:f0:cb:12:4f:9b:4f:e8:07:ad:f4:
45:6d:32:ea:b4:8b:5c:4e:01:15:43:2d:e6:1e:b3:
4c:8a:a0:03:9b:20:14:aa:c5:b0:58:a6:1c:16:d5:
ca:5f:af:8b:46:9d:fc:e3:6a:c2:d7:14:fa:54:d2:
77:cc:c7:de:3c:40:14:75:94:60:1b:81:ec:b6:48:
5e:30:26:93:b9:ac:ba:30:ea:b2:50:b8:80:df:9b:
6b:65:0a:cc:a9:ae:0b:15:4c:06:3b:f0:3d:e6:a3:
5f:73:7a:2c:44:a9:a2:1f:6f:0c:39:e5:3b:ea:57:
a0:64:c0:33:bb:4f:1e:53:23:a2:26:c7:dd:00:6c:
15:ee:b3:27:6e:07:6c:65:9c:0b:02:5c:fd:bb:fc:
29:fa:bd:f4:61:5f:12:7b:08:10:91:55:86:2b:21:
58:b0:60:fa:71:d1:a0:d1:4d:ed:ea:54:eb:21:ad:
25:fe:10:da:3c:69:70:ff:e1:f8:48:88:39:57:ec:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:85:F4:B3:66:CE:2C:10:34:99:1D:FF:FB:A3:7B:0B:BA:91:C2
X509v3 Authority Key Identifier:
keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:e1:ef:da:dd:f9:08:62:a5:4c:76:90:4e:02:e7:12:23:d3:
b4:47:d0:55:b8:fc:09:db:de:12:73:6e:7f:a9:b5:36:2c:72:
b6:24:3e:fd:27:ba:bb:8d:15:b5:5d:76:c9:41:79:ed:49:ef:
0a:53:3b:77:14:b0:22:7e:4d:03:03:5a:62:f3:5a:35:8b:e0:
07:d6:c1:ac:73:86:a7:1d:6b:6b:4b:33:ac:8e:46:b3:f4:5b:
c4:93:35:a0:b1:18:2f:e7:8c:a2:b7:c1:f6:51:ee:06:80:7c:
d2:3e:89:34:ca:e7:f7:f5:9a:ca:ad:61:ee:a2:e3:aa:f0:c5:
5c:83:dc:b8:03:d7:89:47:ed:1b:48:cf:83:46:0e:bc:58:81:
12:cc:08:22:80:47:d5:cb:06:aa:3c:21:d3:37:28:f6:5f:39:
26:2a:6a:4d:8e:23:f6:e4:09:3d:93:b7:c8:43:ed:ba:88:b6:
3e:54:79:16:1f:25:3e:0c:f7:2b:01:91:53:65:42:8d:6e:1d:
e6:62:42:05:7f:6e:8f:f3:d5:71:86:f6:a9:65:24:67:bf:3d:
5e:a8:2c:a0:d5:32:4c:a0:07:84:91:28:d8:64:01:55:d9:44:
35:9c:95:83:f8:78:ff:64:d3:3c:81:2d:c2:b4:bb:7b:5e:82:
ec:ea:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:30:16 2025 by rpki-client