Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
File: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (raw, json)
Hash identifier: YJ76HhaPfBCtCqTNn8tqhJhNOJ+Bfaxx/ZJ3mQYsBwU=
Subject key identifier: 53:0E:70:BE:2E:A7:9C:2A:C9:B1:6C:6B:4B:4D:28:47:E6:45:7A:9F
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0A5F
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
Signing time: Wed 08 May 2024 10:37:59 +0000
ROA not before: Wed 08 May 2024 10:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134204
IP address blocks: 103.211.28.0/22 maxlen: 22
103.211.28.0/24 maxlen: 24
103.211.29.0/24 maxlen: 24
103.211.30.0/24 maxlen: 24
103.211.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2
Validity
Not Before: May 8 10:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663b5607-665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:54:19:9d:b9:fc:59:07:3a:c0:e8:6b:e2:
89:26:09:c4:8b:95:67:d0:0d:db:04:00:d2:2a:1e:
4a:79:92:cd:54:a8:69:65:16:6d:88:c8:59:c0:3b:
2c:fc:cd:62:7a:6a:7e:d2:eb:62:2a:81:c1:4e:27:
f7:81:7e:37:b9:8e:7f:a0:1b:74:57:fa:77:78:98:
40:a4:0a:c4:b6:91:c8:5f:2b:9f:4b:2d:fc:dc:f5:
ae:fc:33:b9:4f:16:19:f2:a1:7f:41:c4:6d:4d:af:
29:09:57:07:22:dd:d9:df:ec:8c:23:54:f8:c6:e0:
65:b2:78:c4:f8:22:03:62:45:c2:0e:48:92:eb:8b:
1b:38:23:29:af:65:02:93:57:40:10:5f:89:0d:68:
2a:d9:b7:aa:ee:e7:61:63:0c:e7:57:26:47:fa:9d:
70:78:52:1e:0a:52:b4:41:0b:a2:85:f6:11:36:b1:
5e:da:59:ec:21:99:1d:f7:3b:e9:a5:e5:54:4c:af:
63:e9:e4:98:a2:af:88:58:2a:d5:bd:a2:c2:26:27:
65:2f:f7:6b:96:58:84:8b:d2:ce:a2:60:5a:fc:d8:
cc:87:de:81:0f:25:f4:c6:f9:a5:60:78:25:53:1f:
9c:0b:69:d3:71:f9:16:f5:2c:87:cb:47:c7:89:cf:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:70:BE:2E:A7:9C:2A:C9:B1:6C:6B:4B:4D:28:47:E6:45:7A:9F
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8f:94:c1:9d:33:3f:e9:49:88:99:ab:00:ed:03:5a:93:c9:
59:af:71:70:00:60:63:4b:e6:2e:65:f9:05:a3:33:a1:cc:4a:
89:39:49:06:63:1f:50:88:42:1e:ec:53:16:0a:d6:55:8f:d3:
5c:c1:bf:9a:aa:14:73:85:e9:3f:aa:44:f9:8e:9c:75:03:8d:
39:ef:42:cc:ce:c1:ec:aa:dd:c8:80:8e:b5:62:f4:ba:28:d3:
96:8a:97:07:6d:1a:10:94:ec:c1:c4:36:b6:b2:55:9a:d6:03:
dd:75:6f:17:92:9c:77:94:19:3c:e2:2b:ca:bb:4c:1f:e6:e0:
d7:f6:dc:33:fe:2f:bc:13:4c:91:ae:a8:09:fc:01:55:b2:4e:
ed:a7:ca:b7:a7:db:57:12:46:70:c0:ca:a8:84:b6:63:7a:69:
af:c5:e5:37:be:3d:e0:bd:0f:85:10:6f:17:0e:c6:62:a2:b3:
2d:de:6f:76:f8:aa:3a:e8:3e:2a:02:eb:04:3a:60:41:3d:38:
6c:78:c4:71:90:99:71:5d:87:56:2c:1a:e0:f9:e2:36:27:f3:
73:56:a8:ef:6a:62:8d:3c:d6:be:79:70:6a:a4:2f:1f:ff:96:
a5:c7:d2:55:a3:cc:0f:08:59:b1:e0:f3:ca:8e:1a:8d:8f:9f:
2a:6b:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:37 2025 by rpki-client