Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C93EE4F2D90211ED8A324E57C4F9AE02.roa
File: C93EE4F2D90211ED8A324E57C4F9AE02.roa (raw, json)
Hash identifier: EOTdBcIjEHzHazKFp5P1JMvoP+V4p7MlG146F5pinn0=
Subject key identifier: 90:A0:D3:59:1A:CC:EE:00:83:DA:22:1A:57:45:94:C8:78:A4:2D:A1
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 043B
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C93EE4F2D90211ED8A324E57C4F9AE02.roa
Signing time: Wed 12 Apr 2023 07:22:31 +0000
ROA not before: Wed 12 Apr 2023 07:22:31 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 212238
IP address blocks: 103.79.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Apr 12 07:22:31 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64365c37-21ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:91:42:99:14:9d:8d:80:eb:7f:20:a5:7a:
f1:32:47:11:f5:a3:ef:8b:f0:b6:a5:2b:8e:07:90:
b8:23:24:5a:19:37:98:73:24:ec:88:53:31:d9:4b:
98:37:e6:c9:f4:07:51:86:3b:c9:3e:66:b7:8a:33:
cc:63:cd:3b:34:57:61:ef:87:68:d8:57:a1:48:46:
21:73:e4:ed:de:f1:64:6b:57:24:77:0e:93:01:97:
ed:45:11:d4:5a:80:bd:91:b2:f5:f4:8d:1d:ed:28:
dd:aa:8b:e9:fa:8d:f5:85:90:41:5e:13:d7:ac:1d:
3f:47:27:be:f9:67:90:39:5d:6c:b5:28:10:db:57:
69:8a:ea:0e:36:2d:f8:36:3e:e5:03:6d:1a:a1:08:
ed:c0:40:54:5b:51:4a:30:58:e0:ba:3d:18:d9:0d:
52:01:ff:e4:85:e3:b1:e5:b0:a3:ff:48:08:7b:a1:
b8:ac:c1:ff:c4:c3:77:4d:07:55:4b:e9:09:a3:a3:
b1:62:87:dd:c5:f6:15:41:d6:c9:a1:99:53:7a:36:
89:36:ba:0e:2b:67:00:45:69:5e:de:08:d3:3f:2b:
49:76:95:2b:23:69:9b:70:cc:15:a3:dd:a6:42:43:
d0:09:74:02:f9:c7:63:87:bc:34:b0:ba:0b:c8:23:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:D3:59:1A:CC:EE:00:83:DA:22:1A:57:45:94:C8:78:A4:2D:A1
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/C93EE4F2D90211ED8A324E57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
75:06:86:9d:57:d2:7e:31:79:c9:45:ad:e4:10:e4:e7:d6:fa:
aa:6e:bd:f1:5e:12:c0:bb:5d:00:00:05:a2:c2:0f:e9:bc:3b:
16:0b:5b:59:c7:36:2f:b3:64:5e:d9:74:78:79:43:08:da:29:
04:0c:e0:0b:9b:11:ba:ef:1c:53:c8:85:7f:e1:9e:38:b0:7b:
42:68:8e:56:3e:3a:d2:16:ce:36:52:61:d3:a2:0b:51:09:6a:
9a:7c:a4:2f:0c:9f:88:65:ed:94:10:4b:70:02:1a:ec:2c:b2:
6a:8c:86:eb:4a:12:08:2b:d5:f8:7c:9e:02:95:4f:5e:b5:78:
b8:3b:3d:4d:6e:e3:60:50:1a:95:09:8f:5b:46:5b:5e:f8:97:
c6:6b:21:4c:37:8d:b3:9f:75:74:ec:33:cd:e4:79:d9:99:1b:
98:ea:60:9f:7e:f2:b1:8d:af:52:02:28:b2:55:7a:21:4f:10:
81:5f:de:a1:a3:39:c3:74:38:1e:b1:cd:24:c6:ff:58:a8:9f:
00:14:f9:60:63:77:67:ec:aa:50:10:c3:77:11:79:b9:ac:3c:
19:ac:27:63:16:29:ac:ca:6f:b0:46:86:1c:87:a1:f7:73:4f:
d2:63:ac:b3:0b:ef:73:9b:a7:52:81:4f:40:20:5b:5e:6f:17:
2f:8b:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:46:51 2025 by rpki-client