Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
File: 39087D74951411EF97138B40C4F9AE02.roa (raw, json)
Hash identifier: 6a1zRNSSOAtNd7SVF0+koIux7rBDle662JpebFeCNKA=
Subject key identifier: 53:65:E2:DA:03:E6:11:8F:36:7A:77:1B:09:C2:B2:76:E5:34:2D:84
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 47CB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
Signing time: Mon 28 Oct 2024 10:15:27 +0000
ROA not before: Mon 28 Oct 2024 10:15:27 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140742
IP address blocks: 103.152.162.0/23 maxlen: 24
2400:f3a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18379 (0x47cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Oct 28 10:15:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=671f643f-6bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:dd:ce:ec:81:05:a9:67:af:c9:97:23:83:
82:8f:74:44:47:04:28:ee:f5:a8:1d:8d:73:d5:5a:
e4:50:41:2f:b6:1e:2b:1c:0d:b0:8a:e5:34:37:da:
d8:e8:9b:83:fc:63:31:cd:5b:bc:1e:7d:37:23:61:
8d:b3:1e:a9:e7:47:c3:cd:73:64:13:39:ac:93:b8:
bd:b5:27:4e:9f:a9:9f:6c:25:ed:c2:29:ab:21:a6:
2c:20:e2:b1:f5:52:bc:b3:ca:1c:17:9b:77:5d:4d:
c7:e0:9b:49:69:8a:8a:e2:bb:c9:eb:56:cb:4b:ef:
42:ad:a2:ea:12:a1:bd:94:60:e4:44:c9:9a:1c:ab:
a2:7b:b6:e3:c9:41:76:93:bd:a6:5d:6d:e0:fc:7a:
8e:66:5e:99:40:b6:45:9b:3d:84:4b:fb:d3:c7:eb:
b6:04:b3:c7:8a:4e:8f:df:09:fe:14:05:72:fc:4e:
4e:4f:cb:15:5d:14:96:89:95:5f:5b:62:45:1c:04:
5f:d4:1e:5a:ff:a7:47:c0:b6:09:bd:c4:33:8a:4e:
9a:fc:7d:83:98:ff:36:e8:2e:b7:00:72:30:20:68:
af:e9:8a:39:cc:f0:a6:da:db:d6:b4:a1:83:0e:86:
ab:c2:c5:95:3e:12:59:0b:b0:06:97:d6:cd:c7:d5:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:E2:DA:03:E6:11:8F:36:7A:77:1B:09:C2:B2:76:E5:34:2D:84
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/39087D74951411EF97138B40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.162.0/23
IPv6:
2400:f3a0::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e6:84:42:3b:f1:48:9d:0a:23:ee:d1:f8:b2:9b:46:dc:64:
f8:1a:65:a4:a6:f6:40:c3:90:7e:22:de:78:a1:74:85:92:9e:
e6:72:e9:b6:eb:d2:74:98:fd:61:ec:43:69:70:2e:86:f2:88:
0d:a7:84:7f:fe:88:d8:fe:55:d3:bc:99:70:c6:7f:64:ae:4d:
2a:98:4a:ca:93:cd:64:d9:47:13:1b:1e:b6:fa:b5:53:fc:1a:
6a:6f:ab:c4:36:2e:17:de:99:57:31:ce:60:9b:11:0f:50:be:
37:2c:bf:d4:87:f1:d7:3f:26:9a:6f:ad:f1:f5:d9:be:18:fd:
0e:32:be:e0:9f:84:8c:e0:1b:7b:fa:76:75:82:51:4c:b6:ef:
a1:05:10:86:c9:17:cf:e5:ac:4b:4f:d8:ad:cf:88:a6:e3:a8:
c3:ee:eb:38:94:02:90:bb:ff:c7:e5:cd:2b:ab:7b:f0:35:22:
fd:9e:32:23:67:78:89:92:3c:c3:d5:f6:c1:1f:47:53:c0:cc:
5a:aa:7a:2d:e4:3b:5e:db:80:92:8a:cf:a3:2b:4c:0d:5b:18:
89:bd:02:1e:b9:d3:14:7c:97:d8:93:e4:c5:52:d1:1e:72:8d:
98:60:40:9c:2c:77:f1:67:a9:ee:36:06:2b:ad:2d:0d:49:0e:
d4:09:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:01 2025 by rpki-client