Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
File: C3D6D0EEA0FD11EC924D4461C4F9AE02.roa (raw, json)
Hash identifier: IByKPBiXomM+Ivaurd3VHm7GodgzG9GNEjLFwNSF5O8=
Subject key identifier: 2B:E9:C7:E1:24:81:73:BF:A0:77:E1:A5:82:88:92:15:F8:70:E4:68
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 454B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:08 +0000
ROA not before: Thu 05 Sep 2024 03:32:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131408
IP address blocks: 103.232.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17739 (0x454b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92638-4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:23:83:a0:97:a6:c2:94:98:b4:ea:b4:96:
44:ec:6e:01:bb:8c:42:c5:84:e6:65:d8:0a:0a:79:
3d:14:13:d9:58:89:f3:50:ff:39:1f:85:d9:5f:fe:
2f:13:13:a6:63:00:df:cb:7d:dc:f3:3c:be:3c:23:
9d:0b:2c:13:d9:ba:34:c9:ec:b7:10:79:15:9f:2e:
9c:92:ab:72:29:51:4c:99:31:33:45:26:c7:70:39:
07:e2:5e:89:a2:3c:fb:88:b9:a2:69:20:5b:ef:db:
73:3a:4b:cc:88:ed:08:46:3c:df:6c:24:7f:27:c4:
1c:2d:68:0b:2c:f6:46:4a:49:8c:2e:c4:ed:5c:d2:
96:e1:ee:f1:eb:a9:b5:a4:00:05:f6:1a:a4:ed:7f:
e1:b4:7e:5b:ed:c9:77:c2:1d:0e:02:b2:70:fa:33:
d5:1a:bf:45:01:19:12:87:4c:37:44:8f:77:8f:b6:
0b:4d:19:be:0f:82:82:f6:ee:a0:ec:cc:d7:c4:bd:
49:70:28:07:6d:80:37:69:08:0d:d8:b0:d8:2c:72:
c8:07:fd:b3:9f:ce:46:11:87:99:aa:11:d7:60:6e:
2b:79:af:c8:3e:6d:4b:23:22:37:11:0c:c6:09:fc:
42:52:b7:8c:0e:ea:07:9e:47:b9:7f:c7:29:fb:1f:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:C7:E1:24:81:73:BF:A0:77:E1:A5:82:88:92:15:F8:70:E4:68
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C3D6D0EEA0FD11EC924D4461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.56.0/22
Signature Algorithm: sha256WithRSAEncryption
40:86:37:86:d4:3d:42:dd:56:49:ce:cf:3c:15:61:9d:e7:37:
df:ef:12:be:03:af:9b:06:f9:b0:f0:a2:4d:41:9d:c1:2b:a4:
40:94:c0:9a:a7:29:80:94:85:f4:90:a9:7b:2c:e9:be:51:62:
64:3e:b9:19:37:39:b5:15:88:5f:b7:6c:02:84:1e:cf:9f:0c:
19:4c:39:f2:39:5c:7b:ad:56:d9:7b:c0:d5:7c:74:cd:82:8d:
e8:a2:ec:b2:3e:53:f8:82:06:a5:bd:97:96:fe:54:d0:20:be:
78:72:a5:a5:2f:fd:6e:8e:a4:65:0a:d5:7a:a8:d6:76:64:59:
3e:82:94:a7:3d:f1:0e:a3:41:61:fd:94:60:ad:c4:e6:e0:16:
c2:63:86:5f:81:de:47:2d:17:66:f6:92:43:cf:5a:a9:a6:ae:
79:55:e2:d4:00:ee:c0:bd:b6:f0:bd:39:aa:14:3f:33:13:7b:
35:e0:d5:db:53:6d:84:43:c8:ce:a0:9f:18:47:a8:fa:27:2f:
d4:54:e8:0e:71:0b:3e:c1:63:55:97:fa:c2:9a:bf:f2:da:e4:
65:ba:6f:95:b3:a9:01:69:f0:b7:a1:76:97:13:3b:62:0e:df:
e1:58:55:e4:f1:5f:9d:67:0c:c5:df:0c:f7:d9:07:d4:2b:ab:
48:20:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:04 2025 by rpki-client