Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
File: 5A5F40627F5911ECA27EA93CC4F9AE02.roa (raw, json)
Hash identifier: nf6XcBM+jlBG9AsYqmBEb86iqXVC3F1gOgViTzeN194=
Subject key identifier: A9:25:E0:59:D2:94:79:46:2E:73:90:3B:2F:C2:4D:61:EF:82:7D:8D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4559
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:20 +0000
ROA not before: Thu 05 Sep 2024 03:32:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131440
IP address blocks: 103.245.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17753 (0x4559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:20 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92644-03ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:2b:27:3e:c5:59:3a:a0:0e:ac:89:aa:c1:
53:11:3e:ce:4f:76:d0:4d:fe:57:74:e1:d4:1c:43:
4c:d3:f1:5c:f6:a7:71:52:c1:e1:3a:22:5b:bd:18:
f0:84:19:51:25:8c:5a:b2:03:e2:93:4d:b9:fe:0e:
d6:2f:57:bf:0b:11:53:8d:f2:88:d5:84:8a:ab:fa:
26:04:59:c5:cf:1b:f1:74:2d:d6:29:26:2c:db:93:
d3:3a:6d:94:c2:c3:57:19:4c:06:50:da:62:27:a0:
3e:77:5f:fc:40:7d:b7:04:12:55:e1:3d:03:12:c2:
9e:08:a0:b5:55:28:11:6a:46:dc:f8:2d:af:31:9c:
46:74:ae:47:f2:0a:34:0f:32:7e:9c:d0:96:f2:8e:
a4:62:22:14:40:2f:b4:ca:03:aa:b9:85:28:ec:88:
2c:d9:9f:0d:b5:33:81:3d:23:48:8e:f0:6c:e5:f3:
45:c2:a9:a0:aa:9b:12:1d:e9:78:68:1d:dd:7b:f2:
64:36:9e:31:a6:02:b8:c7:19:41:1a:d2:05:1a:66:
89:c0:ba:43:ee:89:7d:7f:b7:96:43:28:15:71:fb:
b0:8d:74:49:d0:8f:b9:d0:f6:eb:c1:cf:de:ac:a9:
f6:e9:07:a6:a2:49:8f:7d:64:f2:52:83:af:df:96:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:E0:59:D2:94:79:46:2E:73:90:3B:2F:C2:4D:61:EF:82:7D:8D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.245.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:00:17:ad:aa:9d:e9:e2:aa:9f:86:b0:50:78:a1:a5:7d:71:
48:21:4f:c3:c8:a2:d8:73:30:ca:b2:f0:d5:a8:4c:bf:b4:0b:
ed:93:b9:ac:67:e9:80:17:00:19:66:e8:03:35:08:78:98:ae:
cf:8d:3d:d5:09:4e:84:50:c5:86:41:86:7a:49:a5:e4:29:fe:
e5:e1:e4:2c:b4:52:26:34:51:0d:f6:a8:71:9f:2a:8a:99:a8:
af:6a:b1:9b:ce:a2:4a:4b:94:fa:b9:54:bd:26:b1:d3:51:95:
e5:5d:32:31:93:01:a5:e5:99:ab:7e:bb:6e:81:1c:ca:5c:23:
e8:2d:0e:ee:62:45:e5:ab:f4:08:f0:e8:8d:93:4e:e3:7b:2e:
42:7a:e0:b8:5f:da:b0:77:87:a7:4f:b3:37:94:0d:b8:bb:07:
d2:16:05:dc:b2:fd:7c:4f:07:92:07:4f:c9:26:5a:ea:92:cf:
60:72:5e:56:5c:91:36:47:cc:9c:3e:7a:f1:ba:3c:72:2e:22:
b7:08:d1:fa:c0:6e:af:d4:58:b5:4f:8f:71:20:5a:e7:b6:dd:
e8:a8:8e:f0:8e:3d:dc:87:98:ab:69:ff:ba:81:2d:50:0e:4b:
a6:a3:08:bf:1c:ad:46:c2:ef:b5:df:0d:be:d3:25:20:86:0d:
ad:27:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:28 2025 by rpki-client