Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa
File: 17687AB8D18F11EF8C6F8687C4F9AE02.roa (raw, json)
Hash identifier: WWuXoRDgSFC35DFMV3idQp1hR/mdc4d4fur1hKvZ27k=
Subject key identifier: B4:D1:89:1E:3D:E6:1B:D0:D1:36:7A:0E:BD:03:4C:A0:7B:3E:91:6E
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 065A
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa
Signing time: Mon 13 Jan 2025 09:16:37 +0000
ROA not before: Mon 13 Jan 2025 09:16:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9232
IP address blocks: 103.151.4.0/23 maxlen: 23
103.151.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1626 (0x65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353
Validity
Not Before: Jan 13 09:16:37 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6784d9f5-afd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:b5:fb:9f:10:be:47:f9:6b:5e:86:68:24:
01:16:42:0b:88:8f:1a:d9:24:55:fc:aa:83:80:91:
e7:e6:fd:55:77:8a:6a:cb:95:32:8e:15:8c:2a:0e:
82:20:d6:39:a5:2c:f3:34:86:11:65:e8:ac:82:b0:
88:e0:f2:ba:72:91:1d:c4:08:24:30:8b:d8:e1:1b:
e9:70:86:e5:b9:97:c3:f5:8b:e7:79:72:8b:4f:c8:
a7:4f:c0:1e:ef:a6:58:e1:cf:08:05:15:0d:db:5b:
52:c2:72:05:a4:44:90:1e:48:8e:68:b8:50:21:fd:
18:81:d7:53:28:dc:99:92:83:ad:15:1e:4a:4f:9a:
5b:4b:8c:a3:d7:a3:bf:27:e8:27:e0:c8:8b:8c:97:
ba:52:90:4f:18:20:50:90:45:3e:90:95:0c:e0:56:
d9:01:e3:fb:e5:48:26:76:c7:07:8b:e3:48:33:67:
8f:ff:95:d3:23:06:85:da:fa:f1:40:1f:b5:38:fb:
9e:0f:92:ce:ef:9a:5b:e6:51:92:f4:63:04:63:c7:
2c:fe:67:20:4e:1d:01:48:85:d4:e1:5c:b0:00:8c:
a4:07:13:8a:11:e6:54:77:da:d9:f1:e5:3a:ad:2c:
28:77:ba:7c:91:9f:33:81:c7:d4:97:f2:78:8f:f9:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:89:1E:3D:E6:1B:D0:D1:36:7A:0E:BD:03:4C:A0:7B:3E:91:6E
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/17687AB8D18F11EF8C6F8687C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/23
Signature Algorithm: sha256WithRSAEncryption
99:69:8f:eb:bb:1f:9a:8f:68:ee:79:93:2a:38:a3:2f:84:54:
48:59:93:56:b4:bd:9c:a2:be:46:68:b7:05:68:1e:99:11:69:
61:37:f3:fb:4f:17:85:ca:2d:8a:c4:d4:a3:76:7b:25:fb:ba:
09:6f:06:e8:2a:cd:89:57:64:8a:cd:a8:58:37:58:2c:7c:f5:
58:49:4d:dc:30:65:10:5d:83:fc:d1:22:8b:53:f2:37:8f:b5:
e1:ce:c9:59:2d:93:ff:cf:35:ef:34:11:63:ad:8e:dd:9c:d6:
8c:70:06:f2:0d:ed:e2:e7:92:37:bf:03:2c:61:48:b0:c1:6f:
90:95:e5:09:21:64:e7:c6:62:02:cc:4e:85:68:29:77:a7:da:
18:eb:72:36:8b:8d:f6:26:dd:5b:ef:80:b3:18:bd:61:29:46:
bc:32:f1:bf:07:4a:f7:69:dd:35:d2:26:86:af:ee:d5:1f:d8:
e7:15:73:cc:3f:57:cb:ed:00:7f:f1:96:13:a8:b3:b9:60:37:
a2:db:3f:35:85:8f:a6:f2:09:bd:08:f2:c1:e4:58:28:11:3f:
10:e7:4f:1c:a6:e9:75:69:04:b5:45:a6:a3:c6:be:c4:44:2e:
a2:23:f6:a9:06:d6:50:45:5f:ec:54:14:15:41:50:87:99:40:
a7:b2:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:02:08 2025 by rpki-client