Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
File: FE469BA68FEB11EC818F190FC4F9AE02.roa (raw, json)
Hash identifier: 9wxeawWjiSYvr1gTTY86BGq/vlv1BUt+hPb0Ex/RoZg=
Subject key identifier: 64:66:D5:40:0F:A5:8A:9D:99:C2:13:72:D4:43:D0:9C:98:82:BF:14
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4549
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:07 +0000
ROA not before: Thu 05 Sep 2024 03:32:07 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131406
IP address blocks: 45.119.76.0/22 maxlen: 24
103.255.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17737 (0x4549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:07 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92637-977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:e6:42:86:1b:a8:51:24:8b:6f:d9:6b:6d:
9a:c3:a1:30:ee:8f:d2:a9:10:9d:07:af:33:fa:d5:
29:a9:5f:14:79:66:d6:e9:17:0b:6d:14:bc:49:be:
6a:77:61:5a:2f:0e:de:5b:20:f9:81:64:ef:c3:c6:
6b:3e:fc:00:d4:0a:a3:c9:74:0a:5e:e7:a6:f4:b2:
e2:ae:25:0c:86:89:56:a4:58:82:78:d8:ed:c5:3a:
68:34:5c:74:ca:e5:fe:25:ac:00:28:11:f6:d1:be:
55:21:f6:40:14:08:16:c2:4b:34:05:7d:64:67:3a:
32:62:77:87:77:28:d4:fd:23:26:4a:4c:b7:00:42:
bc:7e:8b:5c:a8:5b:17:32:6c:66:da:83:22:4a:a6:
84:81:cc:fd:98:04:87:2e:b2:ec:8d:79:ca:ee:5e:
88:af:6c:25:57:c4:59:18:e1:52:f7:09:2d:4d:b5:
01:3f:20:8e:30:cd:44:06:05:c4:cc:b5:f0:d0:1b:
1d:75:cd:29:b4:11:6f:77:36:2d:b7:42:d5:69:7c:
7a:66:8b:1d:ae:87:ee:6a:52:2d:8b:c0:a0:17:29:
c6:e4:70:b4:b1:02:73:47:9f:5b:49:b1:d4:7b:68:
00:74:84:97:cc:a1:8e:f8:ae:db:24:a0:cc:4f:df:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:D5:40:0F:A5:8A:9D:99:C2:13:72:D4:43:D0:9C:98:82:BF:14
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE469BA68FEB11EC818F190FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.76.0/22
103.255.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:73:7e:a8:2c:12:43:f0:69:3e:65:41:c4:57:21:ce:76:71:
fb:9c:91:be:8b:fe:49:1a:70:a9:66:b6:11:37:53:8d:9e:f6:
fc:16:31:53:0e:d5:2d:45:90:be:83:16:1f:41:b9:1d:27:73:
0e:b6:3a:b6:47:4d:87:45:1e:c1:b9:0d:1e:29:a9:4d:86:5c:
0e:64:5a:6b:16:ef:b2:79:eb:b9:cb:3b:c3:08:be:a8:70:76:
34:a4:48:c0:04:9f:a3:4c:32:2a:2e:50:ed:a9:d4:f0:70:e1:
cf:54:97:6c:3a:60:71:71:66:17:f7:f9:3b:75:9a:72:6a:d1:
a0:c6:c7:d9:f9:fb:67:03:7a:fb:1d:ed:c2:39:be:c3:dc:58:
c8:de:e5:e0:c7:dc:75:e3:38:40:7b:98:b9:0b:98:45:98:4b:
96:9a:4c:d9:58:2a:78:63:9d:06:40:41:b6:d5:dc:e5:29:2d:
30:ad:bb:1e:19:a5:10:11:07:da:ef:a0:0e:01:89:a5:93:62:
e7:3a:54:b2:00:d2:4c:4a:e9:be:a9:b8:2e:78:ce:33:fe:6a:
aa:92:eb:65:17:f6:7f:85:9f:bf:42:8c:c3:8a:67:0f:85:ee:
ed:5a:20:ac:ad:bd:cc:0f:3d:bc:99:ff:90:06:0b:40:fd:b3:
16:78:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:56 2025 by rpki-client