Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
File: C2604920CFE011EE83247F7CC4F9AE02.roa (raw, json)
Hash identifier: 8T3yBHmtCqlB+aM8ej4zblFk+WNFmZ0LxXxnA03WiR8=
Subject key identifier: 54:9A:64:D4:D6:62:10:83:6C:F3:18:76:D1:B0:08:DC:7D:0D:B7:F2
Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial: AD
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
Signing time: Thu 01 Aug 2024 06:07:57 +0000
ROA not before: Thu 01 Aug 2024 06:07:57 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135661
IP address blocks: 103.62.232.0/24 maxlen: 24
103.62.233.0/24 maxlen: 24
103.62.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD6
Validity
Not Before: Aug 1 06:07:57 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ab263d-5daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:ae:5d:38:92:03:f6:d7:e7:69:c6:1b:e1:
ed:6e:aa:f8:00:7a:66:59:52:29:85:40:30:98:65:
db:65:a8:91:4a:2b:3d:e7:89:a9:7f:47:33:e7:16:
8e:a5:cb:9f:58:d8:de:02:96:5c:4b:e0:24:5d:3b:
fd:5b:b2:57:c7:f2:ce:2c:e6:db:12:7e:bb:38:8a:
20:33:d0:62:ce:61:c1:4c:c8:66:d3:f7:6c:6f:52:
29:32:54:b1:e8:17:42:9a:23:c8:10:b1:d5:3b:26:
4a:fd:03:14:1b:47:de:a5:b7:c5:05:5a:82:ee:2c:
16:b0:1c:83:2d:7d:08:0e:8a:74:d4:66:50:73:d4:
27:2a:a2:fa:39:6e:52:16:2f:0d:d3:b7:78:3e:1e:
9d:12:6c:fa:95:74:6b:5a:85:e4:68:53:ab:33:2c:
02:f1:5b:0c:32:4f:e3:97:72:5d:36:21:c6:15:56:
9a:1b:6a:c7:05:48:19:01:a7:ba:6b:42:64:be:59:
24:f6:e9:75:42:f0:87:e8:d0:7f:52:f6:43:d3:ff:
2a:74:14:01:67:16:28:c5:c2:06:e7:b2:b1:a6:a7:
85:4d:a4:ad:7a:25:1e:a8:31:cc:d7:eb:46:3c:0f:
61:8f:b1:f1:e3:b9:cc:60:60:c7:92:a0:66:b0:31:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:64:D4:D6:62:10:83:6C:F3:18:76:D1:B0:08:DC:7D:0D:B7:F2
X509v3 Authority Key Identifier:
keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/C2604920CFE011EE83247F7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.232.0/23
103.62.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e2:cf:45:1c:51:f3:0f:35:39:2e:3c:40:87:31:9a:cc:96:
61:c8:59:ce:2f:fa:a8:4e:0e:78:c2:96:38:61:f0:bf:8d:14:
db:d9:0b:d3:4e:b4:21:b1:c7:e5:6c:44:27:d5:fd:d9:19:05:
4e:eb:67:d4:53:23:d8:81:69:4b:b5:49:3a:a4:3c:d7:da:35:
d4:43:8a:2d:cb:19:ad:57:b8:95:7e:99:72:b2:59:be:68:40:
4b:09:01:ee:1d:ef:52:c5:23:23:d2:a9:86:32:6e:00:72:a0:
2f:87:54:43:35:0d:cb:43:d2:3e:63:e6:b0:71:61:11:b1:d8:
a9:82:8a:4c:03:02:01:20:98:a8:0d:ca:4b:42:e8:c4:d5:85:
ef:8c:60:aa:1a:f3:b0:e2:ec:26:b0:d2:7b:18:17:22:77:94:
ee:3b:cc:11:de:10:e7:72:ed:98:f9:ee:ba:eb:09:aa:bd:37:
45:f1:14:b3:a7:bb:04:d5:70:1d:3c:03:67:63:72:6b:a3:00:
1c:23:47:26:61:3b:ee:61:f4:3a:49:20:7c:71:a1:ff:ae:e8:
13:4b:e2:9f:79:08:5d:7f:44:7a:ba:f8:4b:c0:3f:06:35:dd:
3b:ad:93:98:c0:74:5d:cc:d5:e2:a3:b3:b3:65:57:98:40:88:
11:65:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:48:59 2025 by rpki-client