Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
File: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (raw, json)
Hash identifier: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=
Subject key identifier: 31:8A:CA:FB:81:B7:5D:CD:B3:CE:22:E4:BB:65:C3:79:AA:F2:47:A8
Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial: 0B9E
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
Signing time: Sat 24 Aug 2024 19:07:28 +0000
ROA not before: Sat 24 Aug 2024 19:07:28 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58665
IP address blocks: 103.12.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC41
Validity
Not Before: Aug 24 19:07:28 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca2f6f-425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:91:25:1e:54:8c:95:d5:bc:f8:dc:83:52:
d3:53:f4:52:52:fa:72:47:ca:32:06:e9:ee:6f:35:
75:30:d0:dc:77:e9:82:20:67:5a:95:e3:e4:3f:0e:
08:cf:07:e3:d8:c9:3b:e1:8e:ab:94:45:48:3a:26:
67:c4:04:41:d5:52:e3:8f:23:fc:7a:c4:72:38:db:
1d:bc:f6:98:b1:92:0b:17:19:59:78:b4:2c:d5:89:
38:6b:3f:b5:cb:c2:c5:8f:19:0a:ee:8c:a2:5b:2b:
78:dd:03:17:e3:f8:fc:9d:dd:d4:3f:64:0a:69:97:
87:b1:82:29:53:75:28:52:b4:4e:01:49:8a:b3:70:
21:98:8c:bf:4b:d0:39:4b:6d:ec:1a:7b:a2:32:0a:
e5:06:6c:89:96:d4:4a:e7:d4:d2:20:c0:3b:51:84:
c9:3c:53:36:83:62:46:0a:6e:e2:8c:4a:a7:10:18:
54:ee:da:91:01:2b:77:d5:c2:5a:63:c1:de:b3:9e:
36:0e:6c:39:93:9d:36:2b:87:47:84:d5:76:7e:70:
a5:e5:fc:d6:7f:d6:f6:b6:47:6d:6a:ef:60:f4:a6:
1e:e3:45:73:7c:33:87:dc:14:87:ad:4e:e4:92:59:
35:c7:f0:9a:05:65:bc:f9:36:5d:dd:c5:e1:71:a3:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:CA:FB:81:B7:5D:CD:B3:CE:22:E4:BB:65:C3:79:AA:F2:47:A8
X509v3 Authority Key Identifier:
keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:0a:4d:3a:8c:b7:4b:12:94:e2:21:16:4c:d5:e2:f9:ae:68:
b2:48:1c:66:32:9b:b0:52:ea:03:49:13:eb:ac:be:f8:78:f9:
59:3e:61:6d:ff:19:ac:56:05:85:ba:3c:7c:0a:56:50:22:33:
16:c9:2f:5e:3c:6e:2e:d0:01:b7:dc:31:90:f2:95:e3:b3:43:
30:72:77:f1:e4:a4:05:75:ca:43:59:6b:90:24:74:99:44:89:
7c:01:54:f0:68:65:fa:81:b6:d0:d5:40:c9:7f:2f:0d:3d:0f:
db:f2:66:b8:b0:c3:cc:7f:db:c5:7c:d0:07:b3:96:2f:d3:4a:
c6:f1:31:7e:07:27:7e:3c:25:6b:76:0b:ef:e4:fe:38:e2:5d:
b7:2d:ee:cd:8a:f2:6e:54:a5:94:5f:45:c2:8f:c9:64:96:6a:
51:85:73:cc:56:3d:4c:b8:b1:bd:e3:fc:30:1a:6f:ec:b6:8c:
e0:a6:88:3a:29:d2:72:cc:a4:44:18:40:f3:9e:d5:0a:85:e9:
c2:b8:7e:74:1c:3d:bb:bc:ec:0a:a4:bf:17:5e:37:dd:23:a2:
d7:30:2e:95:49:dd:4f:16:b1:ca:85:9a:82:90:b4:7d:49:8c:
ff:d3:64:7a:c6:85:bb:1a:f6:71:d9:6b:02:2a:f3:a3:0f:fd:
93:c4:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:16 2025 by rpki-client