Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa
File: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (raw, json)
Hash identifier: KIN1tbUq4dppWJoCfbdzOmrfveInGP54V3tT2sZ6M0A=
Subject key identifier: B4:79:E7:61:AF:B5:90:FA:F4:ED:50:06:FF:D1:62:FD:E3:30:AA:EA
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 0750
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa
Signing time: Thu 24 Oct 2024 21:40:39 +0000
ROA not before: Thu 24 Oct 2024 21:40:39 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 141217
IP address blocks: 103.156.176.0/23 maxlen: 23
103.156.177.0/24 maxlen: 24
2001:df4:f180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8
Validity
Not Before: Oct 24 21:40:39 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671abed7-560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:38:d3:2d:26:15:73:d5:07:83:dd:b1:8c:
9c:36:8b:8c:d0:12:84:60:b1:20:c0:3a:22:bc:eb:
01:b5:af:e5:45:e9:fa:77:de:64:08:d9:6a:99:fe:
ae:46:c2:4e:0c:5a:86:17:1b:9c:28:09:d1:eb:11:
42:ae:99:ac:22:36:4b:cf:94:93:92:b6:c3:0a:15:
40:af:61:2a:aa:1f:b4:6a:7b:02:da:2e:33:fc:8f:
4f:d1:15:b2:0c:13:f3:4e:d5:27:01:65:be:0e:da:
a1:4a:5d:7a:10:49:42:5d:5d:59:0d:3e:e3:05:e2:
8f:3f:7d:aa:a6:50:cb:35:f7:25:46:79:36:b4:52:
53:53:e0:34:24:ed:51:76:30:f8:27:3a:93:6d:a4:
46:be:71:8d:21:fa:f8:b2:08:e5:cb:d2:b7:63:ca:
72:5f:35:fb:3f:a7:30:32:6c:59:0b:6d:5d:40:58:
23:b3:04:9b:80:48:84:48:93:12:b8:91:63:72:fc:
50:80:fe:bc:a9:f9:b1:fc:41:94:b6:cc:66:ed:dd:
28:1b:95:37:95:f2:bf:41:c8:c4:f9:f6:65:5b:8c:
ff:8d:9f:10:a5:ff:1a:53:38:6e:9d:61:0b:3d:3f:
ac:89:51:94:94:4b:e6:d2:57:8e:1a:1e:94:ad:bc:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:E7:61:AF:B5:90:FA:F4:ED:50:06:FF:D1:62:FD:E3:30:AA:EA
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.176.0/23
IPv6:
2001:df4:f180::/48
Signature Algorithm: sha256WithRSAEncryption
1f:1d:88:c6:0d:fc:a7:ef:ab:d5:4a:85:ca:cf:6d:2d:8d:af:
c3:46:26:92:e2:81:f2:15:90:b2:1b:4a:a6:0c:02:af:b9:88:
fc:fe:2f:75:43:66:28:e8:79:e7:96:f7:08:5d:0d:9a:9e:e4:
9c:3c:fe:b6:33:7c:12:f4:e0:fc:03:af:b6:25:e2:fe:7e:64:
19:64:ab:23:52:1a:0b:c1:fe:b0:a9:df:22:89:dc:54:cf:e2:
27:9c:ab:bb:bc:df:d5:0c:d5:89:76:35:95:1c:c3:5a:7c:82:
45:0a:33:1f:43:66:59:62:ab:a0:0e:01:5d:ce:5a:c3:87:48:
65:7d:bc:38:5f:87:a3:7b:fe:0f:d1:c0:7d:ea:dc:96:5e:d2:
e7:e9:fa:4a:d7:3c:04:7d:42:af:92:20:e2:67:88:55:51:9c:
cd:b0:4e:96:31:f1:2b:20:86:fd:8a:4b:6b:84:76:3c:2b:dd:
41:5f:f4:8d:e0:55:a2:bc:db:d8:db:af:83:1a:aa:fb:59:b3:
f6:ba:a0:31:e0:62:13:e3:d9:53:d2:d4:6e:0c:c1:51:cf:93:
f1:fb:54:25:a2:36:46:ce:08:da:9e:0b:61:2d:ee:92:db:62:
d5:ad:e2:a8:e9:23:71:ae:a6:6a:8c:e4:23:60:e0:9f:61:4b:
27:4c:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:28:30 2025 by rpki-client