Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
File: CA5673F0321B11EF9081FB81C4F9AE02.roa (raw, json)
Hash identifier: YcoiilKaD9o41Pc/TlQLPYYUkVf4jbUHZIPP3n0tgvo=
Subject key identifier: A4:F3:E3:62:70:EF:FA:C4:37:D4:FE:3E:8B:91:CA:8C:61:B8:24:67
Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Certificate serial: 0520
Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
Signing time: Fri 05 Jul 2024 00:42:01 +0000
ROA not before: Fri 05 Jul 2024 00:42:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 400619
IP address blocks: 103.66.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476F2
Validity
Not Before: Jul 5 00:42:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66874159-5be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:18:0a:37:02:64:de:cf:0d:5d:9c:50:14:
82:51:18:b8:87:f0:9c:e5:fd:03:f2:66:80:07:fa:
33:98:50:5a:d7:b2:ff:68:4e:0e:62:e5:ed:f1:50:
44:cf:11:05:8d:1b:9b:28:ae:05:0a:ae:1d:c2:71:
79:96:d8:ec:35:e6:f6:ff:45:aa:1f:c8:92:61:dd:
e3:6f:94:31:bb:d8:f6:75:40:fd:d6:2d:06:8d:7f:
36:8c:dc:f9:ea:94:95:1d:ac:78:cd:bf:f3:64:0a:
18:70:f3:e0:dd:0a:d8:e9:9c:cd:33:56:5f:99:5b:
97:87:b6:bb:33:4f:89:c1:8b:39:ed:54:f0:20:95:
01:27:c2:30:d5:80:29:30:cf:1f:71:32:57:3d:c1:
76:d6:53:13:01:92:2f:aa:70:db:bb:d3:3e:39:39:
a2:66:43:a8:38:09:d2:da:ed:a8:9f:8b:ca:d4:8f:
c8:09:63:a1:c0:0c:a3:6f:36:00:f0:a9:25:3b:28:
76:fa:70:e4:6c:ee:2d:f4:4b:e7:aa:ef:58:e1:54:
30:90:f7:41:8d:45:41:ce:06:5d:36:b1:b0:1a:0d:
2e:25:42:e0:09:73:7c:fd:cf:f0:eb:9e:3d:2c:f1:
78:15:b2:cd:e5:76:32:0c:d7:b3:46:b9:16:c6:51:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:E3:62:70:EF:FA:C4:37:D4:FE:3E:8B:91:CA:8C:61:B8:24:67
X509v3 Authority Key Identifier:
keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
06:54:90:48:90:74:94:e5:b6:39:f1:9c:97:90:7f:3d:60:f6:
74:53:d1:49:29:76:59:da:07:7a:e9:e3:fd:ad:ac:74:27:37:
25:5a:a5:07:68:d0:0b:79:fb:57:7c:ea:e8:99:4d:99:42:f7:
e8:04:87:d5:f5:47:6b:dd:6f:2a:89:1b:e7:5c:65:4d:82:25:
19:b6:aa:c7:2d:f2:b5:5b:ae:6f:ff:1b:ae:e0:e7:20:c9:a6:
a7:8c:17:45:0c:26:60:a4:72:c8:bc:1f:a2:c6:11:5d:a1:b9:
e1:70:21:fd:32:a8:9d:3c:19:cb:83:39:cc:f6:6b:63:b0:7c:
aa:3f:96:e2:aa:69:4f:ef:bc:4a:62:31:29:35:da:ed:a6:cc:
37:33:2b:6d:9b:49:69:0c:ed:58:6e:48:97:79:13:a3:c1:21:
9c:d9:e0:af:bf:74:3e:6f:0f:da:c1:21:aa:c9:eb:40:e6:7a:
81:2e:e4:df:37:dc:94:c2:d6:c7:b8:97:58:78:51:fd:9b:f0:
5d:99:d2:3d:24:28:7d:26:0e:0e:a6:2c:67:80:7d:7e:65:c3:
c2:e9:20:38:17:cd:9c:88:8f:e1:a7:ad:e4:ea:14:5e:79:9c:
b4:98:76:33:c1:ac:5d:2e:9b:26:b8:eb:1c:ee:0d:1d:63:ba:
a9:0d:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:24:53 2025 by rpki-client