Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa
File: 659F6E188F2211E98AC7590DC4F9AE02.roa (raw, json)
Hash identifier: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=
Subject key identifier: 58:9F:9D:F3:2E:08:11:10:EC:E7:DA:28:E9:ED:5D:26:71:43:95:E7
Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial: 11C7
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa
Signing time: Fri 06 Dec 2024 17:35:26 +0000
ROA not before: Fri 06 Dec 2024 17:35:26 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138156
IP address blocks: 103.131.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4551 (0x11c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833FF
Validity
Not Before: Dec 6 17:35:26 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675335de-0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:80:81:fb:fb:9e:76:fe:12:80:33:9a:aa:
81:4e:28:27:ad:ab:a4:83:94:22:60:75:03:d8:3e:
24:db:97:76:89:04:78:e2:38:d7:7e:08:b3:50:ae:
0b:aa:ea:54:c1:58:89:bb:57:26:2d:89:ed:7d:24:
97:86:34:28:5b:8f:a8:df:58:40:c3:70:d1:98:19:
b5:30:cb:6d:e1:88:0f:c8:57:d5:b6:2c:d6:13:11:
7a:fb:37:66:1f:5a:c6:67:8d:3c:b1:a4:83:df:56:
2c:93:db:7d:a4:81:24:df:cc:8f:56:93:76:52:dc:
4f:9c:16:67:d5:57:fc:e7:85:81:9a:b3:c1:fc:0f:
fd:36:26:1a:1b:c3:c8:7e:65:a4:e2:3e:97:86:fd:
14:c3:d5:cb:c1:9c:96:e8:48:ff:30:5b:ab:80:8c:
75:8f:5f:25:72:ea:3a:fe:4f:53:11:57:89:7d:96:
1f:8f:11:94:ea:1a:70:c1:50:93:07:a5:92:ba:7c:
2f:c0:c8:59:08:c8:ec:f9:4e:01:fa:2c:b0:48:56:
bb:b3:9d:83:8b:f4:1a:a8:66:9b:25:98:3d:a6:8e:
97:64:d0:b9:0b:a3:3c:eb:f3:ea:68:b5:18:79:54:
81:0e:6b:37:2a:2b:a0:5d:10:b0:24:43:1c:6b:8c:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:9D:F3:2E:08:11:10:EC:E7:DA:28:E9:ED:5D:26:71:43:95:E7
X509v3 Authority Key Identifier:
keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/659F6E188F2211E98AC7590DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5f:6f:3a:c6:bb:48:e5:70:bf:a3:98:bf:c2:72:cf:c9:45:
cb:15:c1:91:c3:4f:37:af:40:bf:a4:a2:28:dd:ba:1f:17:ad:
1b:13:69:12:60:4e:9d:13:45:db:d3:a7:c2:2b:08:d8:cd:38:
38:d8:93:35:dd:17:38:ea:37:e6:b2:28:87:8f:fb:11:9e:c9:
7c:7a:46:08:3a:21:51:55:e6:b4:3a:75:30:ce:27:6c:e0:aa:
4f:61:a6:a5:9b:3f:de:f8:85:f1:a7:c9:99:01:f3:f4:ca:1f:
4e:60:1b:c2:ba:ac:b4:7d:7d:44:8e:bb:7d:b0:9c:4b:06:53:
10:8b:a4:95:d1:18:d4:f1:fa:44:b6:33:ec:eb:78:16:f7:22:
14:9c:83:a8:13:3c:1c:c5:f7:8a:94:cb:9c:da:c0:8d:ff:e3:
99:64:13:fc:e6:87:a3:a9:8d:5d:bf:1c:14:a3:2a:d0:35:87:
f0:ca:95:a4:fa:3e:8f:8a:df:cc:0a:91:61:2c:d4:e8:5f:fc:
ea:e0:7f:2e:02:48:ef:9c:88:11:d7:c4:3e:a0:62:11:60:6a:
f7:c9:d2:f5:27:a5:50:a6:81:3d:b3:0e:b8:49:1b:f1:ac:d5:
be:e4:f4:ce:e6:5e:fd:fe:45:97:16:bd:22:fe:54:db:46:53:
d6:3f:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:36 2025 by rpki-client