Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
File: 655A393E89DB11EEA4226580C4F9AE02.roa (raw, json)
Hash identifier: AYdIAc/KnLKialOwx7mFgfmniXTK68b6Roaj0VkftuU=
Subject key identifier: 86:7D:26:49:10:D9:D3:C9:88:60:80:ED:3F:48:3E:5F:1D:62:50:58
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4572
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:41 +0000
ROA not before: Thu 05 Sep 2024 03:32:41 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135938
IP address blocks: 103.111.244.0/22 maxlen: 24
2001:df4:9500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17778 (0x4572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:41 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92659-45a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:fe:14:7a:92:1e:3c:ee:4d:2c:9f:da:53:
cd:08:99:0b:63:56:06:94:35:7c:cd:1c:81:76:d0:
c6:f1:ad:0e:bf:cc:d8:17:9f:b9:0e:5a:6f:45:46:
a1:41:33:86:2a:62:f8:da:d2:6e:0a:67:78:84:ce:
cb:ed:76:86:bc:8d:f2:66:38:9b:15:c1:bd:55:73:
01:a8:62:61:21:a9:ba:86:d3:f7:30:9e:50:2e:a5:
5c:8d:cd:00:9d:79:cc:e8:3e:b2:93:9b:3a:5e:55:
c4:7b:78:fc:d9:38:dd:cc:f4:ec:da:e0:77:ec:9e:
96:07:26:92:26:d1:8d:a9:cb:fd:67:ec:4a:35:ce:
e8:9c:bc:04:51:ff:d1:67:c9:74:99:88:24:02:c9:
69:ae:cb:63:81:15:2e:5c:02:d9:a8:eb:b6:af:4b:
f9:a6:32:23:84:9b:1b:f9:92:81:00:48:1f:eb:02:
0a:c9:c0:b2:77:70:37:39:04:45:b4:33:db:5f:a4:
1e:d0:ad:10:1c:ce:f7:0a:2c:b4:b6:eb:1f:8c:52:
68:1e:bc:9f:ba:18:f8:4d:16:8c:04:ca:e4:79:83:
7f:57:e5:37:25:56:dc:fa:ad:7b:c4:01:11:06:70:
a0:ef:4c:17:02:41:de:b9:50:b0:28:7f:a1:19:fe:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:26:49:10:D9:D3:C9:88:60:80:ED:3F:48:3E:5F:1D:62:50:58
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.244.0/22
IPv6:
2001:df4:9500::/48
Signature Algorithm: sha256WithRSAEncryption
77:2c:65:30:cd:b6:2c:29:1a:7d:e7:20:b2:03:18:7c:a1:72:
f3:28:cb:74:ee:90:86:45:b3:d4:15:43:ac:4a:60:1b:44:1e:
1c:d4:6c:19:01:7f:46:0a:ad:67:36:c1:8b:62:f8:0b:bc:d4:
81:af:31:8e:3d:f6:e5:5e:6c:5f:3e:e1:49:2d:4a:0b:6b:f7:
ad:6c:ca:06:ff:02:f1:d0:69:12:68:78:cb:52:1b:06:d3:92:
2f:f4:f8:11:4a:7d:e5:21:7b:09:47:a7:6f:12:8a:cc:fd:40:
2a:61:fc:c3:19:5f:e9:7d:94:8a:26:fe:96:25:0d:38:7f:0b:
38:b6:dc:e1:32:84:1f:c3:9f:94:a1:0b:3b:8c:46:85:a5:0e:
e2:95:1a:51:0d:66:5c:15:32:e7:76:2f:c3:e9:54:f7:03:ee:
38:70:f1:70:40:10:98:1c:ad:2b:ea:2f:3e:44:ab:b2:81:ed:
45:17:22:18:b8:b9:df:9a:8b:86:ef:0d:d6:af:88:a3:63:31:
35:00:0e:4a:f3:db:7b:c5:91:50:1d:3d:c9:30:5f:44:7e:3f:
17:19:26:43:75:68:b6:6c:96:00:17:39:de:d2:bf:fd:02:0f:
7e:61:5d:1f:d0:f3:d1:cf:17:58:02:6b:c6:53:a1:c8:36:f5:
dc:2f:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:02 2025 by rpki-client