Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
File: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (raw, json)
Hash identifier: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=
Subject key identifier: C3:74:CF:17:E0:E1:5E:9D:23:C5:0E:BE:A6:42:6D:F8:77:1E:72:BE
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: DD
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
Signing time: Wed 25 Sep 2024 04:18:50 +0000
ROA not before: Wed 25 Sep 2024 04:18:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135365
IP address blocks: 103.253.176.0/24 maxlen: 24
2401:25e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9
Validity
Not Before: Sep 25 04:18:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66f38f2a-6014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:1d:68:21:17:48:13:02:a6:b1:9d:57:15:
51:cd:37:45:64:1a:bf:71:c1:8a:87:3a:88:ed:46:
54:9a:06:93:da:bd:90:21:8d:58:52:9e:45:d3:85:
2f:ca:ed:a1:55:d7:be:ee:8d:a3:2b:df:95:cf:1e:
9c:a6:8a:16:b3:ab:fb:f1:cd:a9:10:06:f1:cc:fe:
93:a1:c5:1a:57:9b:b6:28:2b:e1:97:7f:d0:a1:8b:
b7:cb:82:28:a1:e2:bb:67:a0:f1:14:aa:37:1d:83:
2a:6c:b1:8e:e3:0d:16:bd:81:d0:ce:48:f2:14:9d:
49:30:7b:a1:07:60:d4:79:ca:15:45:92:35:f7:ad:
49:b6:52:97:02:10:68:2e:59:a0:44:cc:12:63:30:
07:e8:51:b6:b0:1a:e7:fc:64:af:0c:4d:59:55:1d:
2c:e7:d7:43:22:b5:bd:53:fd:c9:75:e9:6a:ad:49:
4d:a5:59:c6:b3:7c:48:2c:c2:1e:7f:48:ac:95:7e:
03:53:d9:28:3f:03:7a:1e:81:50:6c:86:68:45:f1:
f0:70:68:cf:c7:4f:c7:24:7b:8a:c7:40:d5:e5:3d:
66:32:10:c1:53:04:4b:5d:51:43:a3:0b:b1:67:1e:
45:6e:76:d3:d9:f5:78:85:cc:8b:51:83:df:3e:14:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:CF:17:E0:E1:5E:9D:23:C5:0E:BE:A6:42:6D:F8:77:1E:72:BE
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.176.0/24
IPv6:
2401:25e0::/32
Signature Algorithm: sha256WithRSAEncryption
94:73:ac:99:98:a6:82:2d:7b:a4:10:71:9b:ac:56:8b:46:a6:
03:27:2f:ab:57:ff:f0:c9:b4:d7:15:46:37:89:af:e6:e4:f0:
0e:1e:c6:c5:cc:06:98:77:e7:8d:21:7d:0e:dd:1c:70:e2:01:
35:09:0f:17:3a:78:3e:64:4d:a9:37:df:12:6d:b6:05:3a:45:
00:ae:b4:6c:62:1a:00:6b:99:23:46:e2:bb:26:06:cb:43:7c:
b6:8c:24:85:ab:85:ac:2d:d7:53:48:b7:16:56:b4:bd:2e:81:
59:c5:08:8a:af:13:5d:0b:a0:d1:cf:0a:c8:bd:5f:e5:a5:23:
4f:f1:56:28:2e:d8:bc:8f:b8:2c:8e:bf:23:f6:ed:57:36:cc:
71:00:a2:dd:c1:15:6f:aa:06:b9:e4:2c:1e:a5:53:0d:7f:66:
ce:70:f0:a4:19:54:84:d5:b2:6f:d6:3e:88:66:fd:56:76:1e:
a2:5e:cc:4e:06:98:e1:af:99:41:55:2b:da:3a:61:b7:88:63:
59:65:95:2a:e0:5c:6b:11:4d:74:0a:c1:b0:8b:9a:e9:a7:57:
07:bf:2b:08:43:31:8f:f4:6e:0b:01:7e:87:9e:4b:be:e1:4b:
75:ee:d6:ea:73:d0:84:6a:fe:27:96:74:f7:69:4a:6e:35:9e:
fd:58:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:05 2025 by rpki-client