Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
File: 9154D088595B11EC89B4C272C4F9AE02.roa (raw, json)
Hash identifier: mEEL35CXEWiN0fiDpAPHRtcw6u8ARAw8DcGcGCgo9LU=
Subject key identifier: 14:C4:D6:4E:A4:03:ED:DC:0A:68:57:06:E6:11:8C:0B:34:56:12:B8
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 455F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:25 +0000
ROA not before: Thu 05 Sep 2024 03:32:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135906
IP address blocks: 103.177.38.0/23 maxlen: 24
2001:df0:1b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17759 (0x455f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:25 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92649-ea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ca:3d:b8:82:6b:6b:88:43:b1:cb:29:58:ab:
5c:2b:f4:45:e2:83:19:2b:8a:e0:c2:ce:10:4f:10:
79:af:dc:81:e0:ba:95:98:e2:11:a8:7d:81:c1:49:
f7:f7:37:32:e7:79:01:d5:80:83:85:a9:68:35:cd:
6e:72:5c:95:0f:49:59:64:80:b5:88:0f:ac:56:9d:
2d:6e:75:af:03:d3:bd:41:29:3f:f9:b8:34:a8:2f:
94:bb:66:cd:b1:02:96:2f:2d:dc:3f:9e:56:f5:2b:
18:88:90:40:33:24:81:08:45:0e:3a:f0:b1:23:35:
46:93:86:02:18:89:fa:c4:28:fe:80:4d:91:dd:f4:
cf:08:d6:83:97:78:14:bc:b5:2d:7b:a2:8e:93:b6:
90:29:f1:f1:3a:c1:6c:2a:c1:59:a5:e2:49:d4:a6:
2a:b4:5e:7d:97:86:aa:44:a8:09:c0:fe:9f:1a:3b:
02:9a:26:a8:da:fe:88:30:b9:93:3e:87:64:a5:dc:
75:e1:9a:10:90:b9:8f:05:ff:a0:5d:25:20:82:60:
ef:39:bf:9e:f2:f3:71:27:4e:18:11:12:b8:a0:d9:
ee:12:9a:a8:df:d8:55:fe:0f:fd:79:88:1d:02:65:
a0:ea:96:00:58:60:9b:e8:74:52:47:a9:f8:a3:84:
c6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:D6:4E:A4:03:ED:DC:0A:68:57:06:E6:11:8C:0B:34:56:12:B8
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9154D088595B11EC89B4C272C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.38.0/23
IPv6:
2001:df0:1b40::/48
Signature Algorithm: sha256WithRSAEncryption
81:b0:d7:d9:ef:00:23:75:cd:13:e8:fe:f4:a4:16:8e:db:71:
49:22:e6:49:72:d0:be:68:3b:71:ed:5f:60:80:3c:76:ea:1f:
ae:b0:4b:b9:19:71:d8:71:e2:d0:96:89:5b:d5:ea:e6:31:9f:
7c:6a:ff:03:11:e8:43:8a:ec:37:fc:b3:61:5b:9b:ba:a9:c8:
74:e4:68:b8:61:bc:df:63:95:11:ad:3d:b4:99:8c:83:4c:d7:
6d:f6:fc:b0:84:07:fb:24:85:2a:4b:c6:fe:13:80:d7:67:22:
5a:c0:12:eb:ed:16:93:6b:ae:b2:a3:66:de:48:47:aa:3e:bb:
12:28:81:fb:24:d4:aa:4a:a5:eb:ee:a5:81:3c:28:82:69:72:
05:3c:ca:c1:c5:0b:d2:2e:cc:e1:3e:b4:28:62:dc:d6:b3:51:
e4:bf:fa:92:56:d4:f7:dc:e6:6e:f5:a2:c5:70:d1:0e:89:cf:
74:64:dc:ca:d0:48:29:3d:5a:c2:de:e0:4a:55:2e:4f:9b:78:
78:10:a6:af:61:95:a3:b0:1e:a3:f1:29:14:1e:6d:fc:85:b7:
d9:40:e3:cf:04:6e:2c:4c:d9:46:ee:fa:50:1b:3a:6c:47:49:
6c:76:97:60:78:a2:07:43:c1:65:2e:72:8e:85:0f:d3:69:d5:
06:ee:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:04 2025 by rpki-client