Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa
File: 989343848E3711EF9CB51A80C4F9AE02.roa (raw, json)
Hash identifier: PDTLqF0kZqIGYGOg4w8aCYAhixw8Qt9ns8CDPisjcVU=
Subject key identifier: 24:06:3C:E9:08:22:E0:30:90:DE:29:E6:39:BC:C7:60:1C:C5:AC:56
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4776
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa
Signing time: Sat 19 Oct 2024 16:32:33 +0000
ROA not before: Sat 19 Oct 2024 16:32:33 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135939
IP address blocks: 103.111.236.0/22 maxlen: 24
2001:df4:9700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18294 (0x4776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Oct 19 16:32:33 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6713df20-2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:18:2c:30:35:e4:cb:02:6b:0f:b8:2d:70:
d7:ac:99:70:13:04:45:af:cb:9c:f5:19:12:f7:57:
cb:aa:b6:1c:a0:9d:7d:c4:92:b9:b6:76:10:42:ba:
eb:50:14:9a:fe:30:19:81:5a:b6:38:e6:84:7d:95:
f6:a5:a9:b9:c1:63:c8:b5:e1:b1:bc:c5:2e:b7:8c:
98:d3:bd:ae:10:f2:99:96:69:bc:6f:ac:b7:8b:7a:
8b:cd:e2:4d:ac:e1:69:77:68:5b:ea:b8:21:c9:e9:
3d:e9:51:65:b1:16:a2:e3:e0:73:95:de:36:a4:3d:
bf:40:ad:c2:32:46:8f:ce:6a:7a:2e:ff:bb:f5:0d:
86:22:40:0a:8d:13:d3:81:fa:c3:4b:3f:17:e7:dd:
c8:6b:7c:04:b5:b8:c6:fb:16:f5:16:8a:a6:a6:90:
93:3c:a4:dd:5f:6d:c9:15:76:58:5c:c2:6d:87:10:
d1:77:73:5e:9f:59:8f:ba:25:cc:ef:3e:54:2b:ac:
04:5e:7b:16:cd:c5:a4:7f:72:05:9f:62:b2:f5:a0:
d2:c4:60:52:40:a9:5e:09:73:82:a9:7b:b6:7d:f7:
91:04:ce:8d:21:52:d3:44:6b:b9:d0:68:3d:3c:5a:
cf:b9:fc:f0:d7:29:08:cb:bf:df:2c:65:aa:83:30:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:3C:E9:08:22:E0:30:90:DE:29:E6:39:BC:C7:60:1C:C5:AC:56
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/989343848E3711EF9CB51A80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.236.0/22
IPv6:
2001:df4:9700::/48
Signature Algorithm: sha256WithRSAEncryption
25:d3:d9:37:9d:25:12:44:95:b6:a5:ab:a8:d9:57:d2:75:a1:
3d:8f:35:d7:79:32:40:5c:9d:7e:e2:90:ea:ea:aa:f0:07:0f:
b8:ec:7d:e4:e1:e9:53:d9:21:bf:8e:65:3b:d9:a3:04:e8:dd:
7d:05:08:85:57:f1:53:44:27:90:03:d9:9a:fa:45:f6:f4:f4:
18:06:88:06:98:b1:53:f8:45:4e:0c:bc:8a:a6:00:60:30:14:
6d:c6:44:cd:a1:99:06:48:bc:35:0c:5b:dd:88:4a:08:f8:f1:
bc:9e:1e:4b:56:a0:83:82:d1:58:bd:53:b7:a0:ee:a4:89:4d:
91:31:16:45:29:bc:bd:2b:26:7b:47:d8:05:1d:f9:0f:03:ec:
9e:aa:b5:d4:b3:21:a4:90:3d:0f:c9:ca:f3:c3:3c:64:d8:6f:
37:86:3e:b9:48:87:09:29:98:a8:b1:f9:21:c9:3a:fd:0c:04:
94:e3:0f:bc:b7:f1:fe:90:43:47:8b:4d:a7:59:8f:27:59:8c:
fa:11:e2:29:d3:43:94:a9:a9:2e:f6:d8:3f:3d:59:dd:ae:bc:
ec:d0:23:86:60:2f:81:bd:38:65:47:99:81:1e:2e:a0:7a:a4:
70:c4:0f:52:bc:33:f1:ba:28:e2:ea:c7:e6:20:e7:82:d6:90:
47:06:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:20 2025 by rpki-client