Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
File: 4CA62F225BA611EFAF5C271DC4F9AE02.roa (raw, json)
Hash identifier: q1REDjqqJQeaws58xnJAdHV4Sk8bZ/8IPg1oVkskTLA=
Subject key identifier: 91:73:9F:6E:9B:8A:ED:F4:5D:C7:50:55:F9:36:78:27:DC:AE:96:A1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4588
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:33:00 +0000
ROA not before: Thu 05 Sep 2024 03:33:00 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135988
IP address blocks: 103.143.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17800 (0x4588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:33:00 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9266c-58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:bf:88:73:a4:84:ee:29:df:dc:29:f7:70:
b8:a8:53:b9:33:28:7b:25:bd:d5:45:74:af:9c:7b:
c6:53:a9:14:de:41:4f:90:86:a4:98:f0:86:93:79:
37:d8:5d:4e:94:4d:b8:f8:e3:e0:59:f1:c8:3d:43:
60:b9:ef:53:e5:7a:77:8b:d0:d3:c2:1a:2b:fe:31:
74:c0:f6:8d:c7:74:32:e9:4c:52:35:1a:e0:51:ce:
dc:1a:53:73:96:e4:12:76:68:11:f1:a5:62:f7:d0:
55:7c:42:03:17:d2:6c:4e:2c:ef:7d:0e:60:32:ef:
f6:3e:ca:83:86:a5:24:ea:a0:75:56:aa:10:95:47:
f3:66:88:4d:f7:2d:01:d8:ad:87:5c:a5:12:2b:d2:
7a:9a:99:62:19:ef:0c:5b:7a:4d:56:16:a1:a0:c7:
c9:27:b8:88:68:94:07:ac:b6:4e:20:9f:84:53:71:
5a:80:41:fa:4e:d8:0b:6c:59:b9:a2:da:e4:b6:9b:
d1:57:ec:80:95:0e:62:39:e2:ee:19:92:f4:60:92:
5c:c4:76:1f:65:12:1e:bb:e5:6e:c0:06:f0:32:f4:
94:ca:4d:a4:91:f4:1b:36:30:ef:0e:a3:9d:d5:f3:
33:d6:c2:53:be:dc:38:58:ba:82:c4:35:15:b9:5a:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:9F:6E:9B:8A:ED:F4:5D:C7:50:55:F9:36:78:27:DC:AE:96:A1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.140.0/23
Signature Algorithm: sha256WithRSAEncryption
28:e4:23:b7:bb:6f:eb:bd:0f:0b:53:c5:5f:47:56:3b:13:2c:
2b:cc:83:ff:ea:71:63:00:4f:fd:1f:ad:59:87:1a:88:61:67:
fc:0d:d3:d9:67:34:ee:ef:07:8d:39:40:4f:7c:5b:a3:96:c1:
d5:a9:e0:89:79:f5:9b:bb:11:6b:0e:b9:31:89:ef:73:18:96:
50:8e:40:5c:d9:5c:08:0a:95:5f:34:56:b6:3c:3b:c9:06:ea:
ae:82:07:c2:ee:8f:9d:80:29:5c:3f:c1:8b:01:a6:7f:25:0f:
eb:f1:5a:ca:cb:4c:67:d3:67:34:c0:55:53:27:b2:e4:7a:18:
aa:8b:bb:73:62:b9:22:ef:44:76:8e:c8:60:de:d4:e2:5d:3c:
6d:02:d0:dd:d0:b6:49:92:8b:f1:3e:45:84:64:09:25:05:49:
a3:86:80:8f:84:fb:51:51:73:2c:59:ee:54:5b:5f:e9:cd:18:
5e:c9:b5:b2:05:df:aa:ce:80:d0:4f:ce:53:54:28:25:e7:9b:
ef:5b:00:c3:05:d2:c6:e5:9b:2a:bc:e4:70:33:97:23:d8:e8:
15:33:9a:bd:7d:3c:8f:5f:02:bf:d6:6c:d6:2f:5f:55:dc:8a:
59:e5:33:da:c5:f3:7f:45:95:a8:89:1c:ad:96:3b:0a:1a:f5:
c7:24:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:19 2025 by rpki-client