Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
File: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (raw, json)
Hash identifier: w67HRNi/yFu6FrtkXk67zQVeYi9FWWK0Yn59oMaToP8=
Subject key identifier: 30:77:0F:75:31:02:42:09:3F:45:32:C6:C1:9F:59:65:62:FB:B5:FB
Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial: 03F5
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
Signing time: Thu 03 Oct 2024 00:34:24 +0000
ROA not before: Thu 03 Oct 2024 00:34:24 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138186
IP address blocks: 103.173.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FFF
Validity
Not Before: Oct 3 00:34:24 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fde690-7ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:93:bb:3d:5a:24:e8:c9:0c:d9:b2:c1:e0:
75:db:d2:ae:84:d1:19:b6:5e:cf:b1:23:06:5b:c4:
dd:fe:73:7c:2e:e6:b1:f0:bd:f5:5b:be:8b:27:db:
88:4c:5a:63:c7:9c:7b:15:2f:28:60:65:05:fc:70:
ee:74:da:82:63:7c:6f:5e:6d:70:32:95:5d:31:34:
6d:15:c5:5d:4c:41:96:8e:25:a5:03:a7:15:66:c4:
26:33:8a:50:85:61:cc:cb:51:46:d1:e4:a9:7c:b0:
db:f0:42:24:ee:a3:69:64:9d:ae:4d:fa:8c:48:54:
72:0a:95:af:b1:d4:4b:95:d1:ae:a8:ac:d2:16:8f:
52:8f:a6:2f:2c:17:4a:fb:98:88:d2:b7:de:21:ed:
61:c5:6e:34:af:2f:94:51:93:30:b1:99:80:ed:fa:
31:8d:7d:38:86:bf:9a:4e:5b:fe:b9:10:79:1f:5c:
20:dd:36:4a:99:7f:69:35:ba:b9:45:53:f4:80:e0:
30:04:2c:8c:dd:43:dc:14:bb:9c:0c:c7:26:3d:bd:
f6:4e:06:04:3d:3f:6d:c7:9a:56:05:6a:4e:25:2a:
ef:b7:4e:c8:66:b8:7d:ae:5b:92:c7:11:f5:5a:11:
24:0a:a4:55:dc:6b:ac:eb:de:8a:fd:55:a6:1b:a2:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:0F:75:31:02:42:09:3F:45:32:C6:C1:9F:59:65:62:FB:B5:FB
X509v3 Authority Key Identifier:
keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/AC63C4A4A62E11ECBDD6843FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.176.0/24
Signature Algorithm: sha256WithRSAEncryption
63:68:bb:7c:da:b6:d4:5d:89:c5:d2:75:8f:1e:58:d5:d7:df:
0f:a6:2a:13:a7:d6:f0:0d:44:d9:48:75:af:9f:7c:3b:71:e8:
bd:0a:8a:65:bb:57:0b:cd:e8:bc:da:54:8a:79:34:a5:06:95:
55:83:6c:a6:c9:f8:4d:bb:27:5b:6b:a6:21:32:8a:89:dd:74:
7a:b0:1e:97:69:67:4d:03:d9:37:c5:5a:ee:62:86:3a:96:43:
2a:50:22:2d:ae:32:55:93:e6:02:c8:9e:fc:e4:f2:3d:14:3f:
be:3a:0f:ae:5d:3d:18:bf:7d:46:11:cc:00:92:c7:a3:18:03:
39:fb:60:43:a7:77:ac:aa:ef:53:4c:42:a3:df:fe:a1:44:54:
b6:6a:1a:e2:a9:16:77:3f:1f:54:a9:0a:89:88:5d:ec:ce:cf:
1d:96:a7:fd:2c:68:9e:d2:b9:8a:75:05:bd:1e:f7:24:25:f1:
be:bf:bc:14:71:c2:75:25:ac:ab:80:ae:81:46:82:ad:8b:75:
2e:35:e3:56:98:9e:bf:74:25:81:73:45:59:6e:8c:e4:be:7b:
30:40:39:4e:c8:7f:5c:e4:a3:f4:59:c6:ed:16:bb:03:82:ec:
55:97:a0:e6:aa:31:64:81:eb:3e:18:95:a5:bb:6b:f3:02:20:
fd:b1:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:02:44 2025 by rpki-client