Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
File: 101550F4247A11EB97620E4AC4F9AE02.roa (raw, json)
Hash identifier: jsaYUV9MyQf/RZz1w8kgJ5x1GAJGLLL2SfJ7+Rey3pk=
Subject key identifier: 71:63:21:2B:0B:75:C8:BD:D2:D5:AD:00:9D:7D:4E:A6:6F:6E:0B:C9
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4562
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:28 +0000
ROA not before: Thu 05 Sep 2024 03:32:28 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135910
IP address blocks: 103.150.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17762 (0x4562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:28 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9264b-a55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:cb:c0:cc:f9:d4:08:7a:44:20:12:3c:63:98:
40:66:b9:43:f5:5f:13:f0:b1:af:d8:4f:1a:2c:8d:
e6:c1:f9:0a:43:db:2e:62:dc:f0:e6:52:1e:4e:fc:
76:18:3e:88:b5:b5:93:e5:6f:ad:ab:72:4f:82:55:
cf:48:ca:66:60:b3:b1:40:71:3c:a0:59:0e:36:44:
c4:84:88:0d:79:52:35:e1:f0:f7:14:ab:15:32:f4:
53:3f:15:9c:30:90:db:6f:d2:ee:50:2c:d1:60:af:
3f:d6:a0:b8:ff:ca:25:89:18:69:50:cf:74:d6:45:
93:51:fb:31:5a:10:15:ce:26:74:79:3e:32:30:ca:
54:19:39:f1:d8:fb:dd:94:df:5a:ba:f9:73:10:a8:
84:82:14:57:27:db:a7:02:01:d5:7b:23:03:e3:9c:
2d:9a:5e:5a:f0:ed:42:d6:8e:dd:68:82:13:ab:84:
97:37:0c:9c:7e:4f:0d:fb:a3:82:42:80:ef:51:82:
28:7d:a3:1b:92:5f:51:fe:f9:ab:79:91:66:09:2b:
ff:7f:ba:29:28:c6:fe:60:66:99:7e:9d:cd:ef:32:
44:c6:4a:26:5b:90:b5:ed:cd:3a:57:bd:90:96:6e:
17:0d:6e:00:cc:0b:70:1d:1a:9c:28:91:80:df:10:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:21:2B:0B:75:C8:BD:D2:D5:AD:00:9D:7D:4E:A6:6F:6E:0B:C9
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/101550F4247A11EB97620E4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.240.0/24
Signature Algorithm: sha256WithRSAEncryption
85:89:be:ca:d7:f1:b2:dd:03:c1:1c:9f:33:54:57:30:92:a6:
b0:a7:b1:66:16:e3:6b:ab:2e:70:14:f2:0f:20:8c:5d:8f:de:
b6:a8:73:fe:27:1b:dd:17:cf:44:67:22:bc:49:34:fe:6f:76:
49:67:a3:af:f0:82:06:54:5b:62:a7:6d:36:e3:ff:4b:5b:cc:
af:7c:ed:b3:76:cc:8e:11:5c:10:4c:cf:4a:d4:a1:cd:f6:31:
68:6a:a1:f1:ca:68:a3:85:eb:66:17:92:73:fc:a2:c6:46:b2:
52:66:e6:20:d8:38:a1:13:3e:3f:c9:26:bc:3c:f4:9b:86:15:
a1:2f:29:26:e4:f7:8e:ee:a6:94:7d:23:cf:3b:41:c3:03:a6:
09:85:01:2e:d9:43:c9:a7:e2:b5:b9:3b:26:6d:66:ff:49:7a:
0f:8f:79:5e:b6:38:c2:44:c4:c5:a1:a5:61:5f:b7:1b:af:62:
40:f7:87:a4:df:11:e7:6f:f2:07:ef:f9:b3:9e:36:b4:e7:35:
8e:b0:f6:d9:31:06:f9:2d:1c:64:2a:d5:49:67:de:a6:76:96:
f8:a5:d3:2a:ee:16:13:86:96:e0:f6:da:68:86:83:5f:42:6d:
03:d5:1c:a2:38:8d:64:f6:24:35:60:47:53:e4:4d:96:17:e0:
20:70:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:20 2025 by rpki-client