Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa
File: BF21361ECAAE11EBA95C5E64C4F9AE02.roa (raw, json)
Hash identifier: uCBRJFoBq1WgaHIXlS/hexuhDmlnktAKMA5Xe9WsCx4=
Subject key identifier: 75:A1:7C:19:52:CE:59:01:C9:E2:BD:1E:72:A3:23:27:F0:7D:9E:E8
Certificate issuer: /CN=A91883AD/serialNumber=0ADA8A7658C749BCA9004786959BC686207BAA9E
Certificate serial: 053A
Authority key identifier: 0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa
Signing time: Wed 02 Oct 2024 23:32:58 +0000
ROA not before: Wed 02 Oct 2024 23:32:58 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 140966
IP address blocks: 103.153.232.0/23 maxlen: 23
103.153.232.0/24 maxlen: 24
103.153.233.0/24 maxlen: 24
2406:4e40::/32 maxlen: 32
2406:4e40:5::/48 maxlen: 48
2406:4e40:100::/48 maxlen: 48
2406:4e40:200::/48 maxlen: 48
2406:4e40:300::/48 maxlen: 48
2406:4e40:400::/48 maxlen: 48
2406:4e40:500::/48 maxlen: 48
2406:4e40:600::/48 maxlen: 48
2406:4e40:fce::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883AD
Validity
Not Before: Oct 2 23:32:58 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66fdd82a-3aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:4b:a5:e4:a2:0b:00:d9:59:51:c9:21:27:
5b:50:90:be:65:b8:fe:55:d2:32:78:2f:82:18:8e:
fa:24:68:71:7b:ec:05:c5:21:32:72:d3:6e:92:bc:
1d:76:6f:3c:8f:ce:a2:0d:03:79:26:35:e3:ec:9e:
a2:ef:29:cb:42:50:c3:17:25:b3:3a:d0:4b:e5:be:
5a:da:58:0d:a9:af:57:6d:8c:22:cb:b6:4f:b4:43:
e4:2b:4e:88:61:4c:76:47:45:da:08:e4:35:5d:17:
7e:53:e9:ac:29:0d:6b:28:cf:d6:ba:30:50:9a:1c:
ba:e5:b5:a0:46:25:e3:65:9b:5f:14:03:f9:c1:bc:
50:a6:c3:5b:75:27:9d:92:80:06:91:bc:e9:86:b8:
38:72:c7:4d:38:90:89:f6:48:f7:f5:ae:44:e3:96:
76:5f:b5:49:47:4b:c4:d5:17:9a:93:fe:d1:e3:90:
a4:c5:d6:24:f4:b7:06:56:c7:62:1a:91:53:bd:5b:
35:b7:d8:8d:c3:b4:82:a6:44:23:94:39:e0:30:26:
01:a8:6a:a2:65:14:45:c1:79:6d:bd:84:2b:30:21:
41:55:f3:41:79:ed:72:a4:83:12:70:fd:6d:72:5b:
9a:a7:d0:f4:d4:3e:30:ac:3e:e8:62:2b:83:a5:99:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:7C:19:52:CE:59:01:C9:E2:BD:1E:72:A3:23:27:F0:7D:9E:E8
X509v3 Authority Key Identifier:
keyid:0A:DA:8A:76:58:C7:49:BC:A9:00:47:86:95:9B:C6:86:20:7B:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/CtqKdljHSbypAEeGlZvGhiB7qp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CtqKdljHSbypAEeGlZvGhiB7qp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883AD/BA0B0938CAAA11EB93CE215CC4F9AE02/BF21361ECAAE11EBA95C5E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.232.0/23
IPv6:
2406:4e40::/32
Signature Algorithm: sha256WithRSAEncryption
26:e9:df:17:43:a2:70:94:24:60:3c:de:e9:9c:23:5c:12:13:
b3:de:f7:09:ba:fa:6e:bc:41:07:4a:ee:62:58:be:96:ea:88:
62:fd:b8:d4:a7:a8:f4:d0:d4:c1:72:71:58:89:9d:35:1e:5e:
a6:e5:e1:a2:6e:4e:c9:91:ac:a2:64:e6:d6:f9:87:68:06:11:
5f:2d:1c:36:14:b2:f3:b6:cc:f4:ae:8c:95:03:ca:65:9c:9b:
8b:9c:e0:ee:21:66:dd:35:a9:03:db:dc:14:7d:b6:27:96:92:
0b:6a:ce:63:22:d8:b8:fd:63:f4:37:95:2e:c7:78:18:4d:37:
e2:b9:ff:eb:cd:bc:f1:0a:b1:d6:55:49:8f:9e:2c:ab:3a:85:
cf:90:40:bd:63:ae:4c:ab:23:74:c6:d2:95:8e:60:f2:65:cb:
60:1f:7b:dc:e3:4d:3b:2e:09:5d:4f:9c:9b:0f:dc:06:7c:64:
9c:e5:dc:83:d0:f5:2f:2b:eb:04:60:a0:da:a9:11:c8:ab:ca:
1e:5c:17:ba:05:3f:89:2f:a9:61:36:bf:e8:3e:f5:ce:ff:aa:
2d:9a:c1:8a:45:ea:b4:99:79:a0:e2:9f:62:6b:74:ff:8f:a4:
b9:46:b4:84:bc:25:00:7e:26:21:fe:1c:0d:83:81:91:a4:1e:
23:1b:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:48 2025 by rpki-client