Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
File: FE2BBD84654C11EFBB242E58C4F9AE02.roa (raw, json)
Hash identifier: nimW3zBRaJ15Q1zgK1fi0fvC4A49TY3Jm2aY3C15MYQ=
Subject key identifier: C0:31:E5:C4:A9:79:A3:6E:05:3E:D4:74:D4:A7:69:07:F7:4A:74:E0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 459C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:33:19 +0000
ROA not before: Thu 05 Sep 2024 03:33:19 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140787
IP address blocks: 103.163.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17820 (0x459c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:33:19 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9267f-3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:b1:b0:cb:98:a4:71:60:fb:04:b0:32:5c:
55:2e:9c:5b:ba:2c:eb:ce:8d:ac:fb:4b:8b:01:01:
66:78:49:67:a5:f5:e9:30:09:98:8f:a5:12:89:1c:
ba:4d:f9:30:4f:3c:15:cf:49:db:26:56:e2:83:fc:
3a:b0:b1:ca:be:d3:fe:e8:11:92:e9:71:c0:f4:1f:
fb:c4:83:d2:09:e2:c0:d5:43:a2:9a:d2:08:a1:ec:
bc:d8:28:22:2f:31:92:f8:8c:a4:cc:af:09:60:26:
cd:c2:4c:bf:da:60:f5:6e:ce:9d:44:52:d9:6e:28:
a1:39:80:23:c7:90:f0:a2:a4:63:d3:87:a2:f9:87:
73:6e:59:4d:2e:7a:ad:65:21:a1:55:6f:e0:ed:e6:
fb:7e:49:2a:ce:f4:6c:5d:14:8d:60:26:f3:1a:5a:
eb:a9:a3:f5:86:76:4c:57:d4:9f:81:fb:02:75:5e:
43:f7:7e:a8:a4:20:93:db:ef:0e:36:3e:bc:9f:eb:
e9:ab:de:01:c8:80:00:a4:c4:ba:aa:29:e3:98:e6:
52:cf:a1:53:68:f9:49:00:07:c5:4f:32:c9:80:65:
54:76:ab:69:9d:04:98:6c:07:f7:5b:9f:6b:c7:34:
a4:a5:0a:19:30:ab:ca:40:40:9d:01:3c:60:95:3d:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:E5:C4:A9:79:A3:6E:05:3E:D4:74:D4:A7:69:07:F7:4A:74:E0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE2BBD84654C11EFBB242E58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.218.0/23
Signature Algorithm: sha256WithRSAEncryption
41:b9:23:2e:43:c2:60:60:92:48:c8:18:7b:36:1b:86:39:be:
8f:7b:66:2a:42:d7:67:00:91:d7:b7:e1:1c:23:9f:73:69:fa:
9a:22:d1:1a:47:d8:ed:c2:53:40:68:81:3f:aa:09:22:df:4f:
91:ff:1a:fb:07:7f:ae:53:ff:a4:59:97:d9:7e:9b:a4:48:f4:
fb:2a:d1:60:e1:58:5c:12:5d:ba:ee:19:11:9a:d1:98:e0:cb:
02:0e:5c:08:30:65:8d:b7:75:16:80:0b:5f:5c:fc:54:bd:34:
8b:14:fa:06:2a:c1:4e:80:66:66:53:1c:df:29:e3:30:dd:7c:
05:e6:dd:51:3c:10:8a:13:30:01:3e:e4:04:f4:1f:1c:f6:e0:
8a:91:75:27:49:34:bc:38:89:6e:97:d7:3c:5e:55:1f:e6:f8:
0f:f7:ed:a8:da:c3:9c:43:3b:2e:25:6b:6e:1f:f3:57:63:3d:
6a:36:b8:02:5a:90:ed:a8:a1:74:ff:cc:db:2a:76:56:83:e3:
65:9b:f8:bd:48:6b:f5:c2:08:64:da:9b:71:1c:13:82:18:0d:
1c:be:22:d4:08:3a:51:32:bd:fc:33:31:1e:81:2e:26:18:e5:
d4:56:da:32:b3:8f:76:c4:90:db:0e:c4:6f:75:5f:bd:11:18:
53:00:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:01 2025 by rpki-client