Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/8A345D2891A111EB87E23C38C4F9AE02.roa
File: 8A345D2891A111EB87E23C38C4F9AE02.roa (raw, json)
Hash identifier: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=
Subject key identifier: 58:3E:97:8E:50:11:2C:58:C6:60:A1:DA:E3:6A:95:0D:90:C2:91:8B
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 0606
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/8A345D2891A111EB87E23C38C4F9AE02.roa
Signing time: Fri 06 Dec 2024 22:42:07 +0000
ROA not before: Fri 06 Dec 2024 22:42:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24115
IP address blocks: 103.95.77.0/24 maxlen: 24
103.95.78.0/23 maxlen: 23
202.176.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7
Validity
Not Before: Dec 6 22:42:07 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67537dbe-f58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:3e:05:e1:81:84:a3:d8:77:27:92:bd:a1:
3d:83:b3:60:ae:66:78:58:0f:22:63:65:aa:50:c3:
2e:af:f4:b8:79:9b:f9:2a:78:1d:98:1b:44:68:93:
9d:a5:70:39:ce:44:b9:41:6b:9f:b8:96:c8:b8:81:
87:f5:da:0e:9e:79:5a:28:3d:ea:6d:9d:04:84:f1:
6e:a9:93:e2:a0:27:0c:ea:87:61:a5:e9:f0:cd:06:
8a:5e:21:77:8b:ed:94:8e:f4:94:37:3f:d9:79:99:
0c:39:1c:53:22:b5:7f:60:ef:6a:0b:c3:ef:71:d0:
05:43:c4:f3:38:57:3e:0e:53:b3:50:72:06:45:4a:
de:95:02:ab:39:5e:9c:70:47:23:d7:94:d2:c0:ac:
91:41:22:81:51:20:d5:1e:94:01:d2:6d:ce:66:3e:
33:43:30:da:cf:88:c9:04:d8:c1:8c:64:f6:33:63:
5b:71:54:ec:70:f7:2b:a3:28:0a:e4:76:5e:a8:89:
d2:36:56:cd:35:22:a6:05:32:7f:ce:37:84:d2:54:
c5:29:a4:f1:9e:46:2c:2b:eb:45:10:27:16:16:45:
4d:c7:94:65:ea:fd:a0:09:1f:2a:ba:2d:cb:6d:96:
8c:75:ce:be:38:07:cf:fd:44:e4:1a:d0:03:74:58:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:97:8E:50:11:2C:58:C6:60:A1:DA:E3:6A:95:0D:90:C2:91:8B
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/8A345D2891A111EB87E23C38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.77.0-103.95.79.255
202.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:29:e6:22:1a:c6:c3:ee:74:57:99:87:09:65:a7:0f:cf:b4:
a4:e9:ce:f9:4a:66:bc:9b:3f:93:2a:c7:74:fe:23:2c:2b:f8:
ed:f3:19:b2:9e:d6:03:c2:a3:b0:41:10:e5:5e:c4:90:07:9e:
10:4c:b9:e4:45:18:78:41:ef:cf:81:ae:6f:dd:ba:49:8b:f6:
84:16:33:0c:53:37:1c:0f:41:1a:c8:db:25:73:4d:07:64:bd:
98:83:3b:e9:38:f5:15:f1:e0:30:0e:62:ac:97:99:77:67:48:
fc:38:fd:d5:8f:12:39:57:35:94:98:c3:c3:62:96:ab:b6:79:
c2:9e:ba:e0:ae:ba:56:09:38:de:d9:c7:f0:42:b4:06:b3:b8:
61:8b:d1:66:fb:73:a0:8c:ae:81:e2:98:0c:ee:da:18:cb:09:
17:f6:4a:24:35:f4:f3:82:da:f8:b4:12:6c:5a:fd:15:15:fc:
7a:8d:48:0f:bd:04:65:83:cb:b0:82:71:8e:9d:08:3c:fa:70:
94:6e:d7:12:56:09:15:91:bc:c8:00:ad:05:96:97:15:fb:b1:
3e:7e:d7:3d:b5:e7:de:27:11:6f:4f:d5:c7:db:96:d9:d6:84:
64:6c:4e:75:d4:54:de:a0:e3:87:a5:c3:94:f2:e3:ec:97:5b:
c4:34:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:59:51 2025 by rpki-client