Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
File: B5F911E8429411EC8882FA1EC4F9AE02.roa (raw, json)
Hash identifier: Ib+CF/sk+KvnPvMxoim8MHqeWZYKc+NyST1cJiaAhsI=
Subject key identifier: 57:B8:F5:C4:9F:08:AA:17:3F:9F:C1:91:5A:85:34:E5:E3:1F:AB:8D
Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial: 0421
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
Signing time: Wed 27 Nov 2024 00:14:48 +0000
ROA not before: Wed 27 Nov 2024 00:14:48 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 131316
IP address blocks: 103.100.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC4E
Validity
Not Before: Nov 27 00:14:48 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67466478-ef75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:e7:3c:54:71:1e:7c:30:f4:34:d0:4c:15:
47:93:fd:01:9c:b7:c8:ea:50:da:82:dc:02:5b:46:
4f:b2:f4:8d:bc:44:c3:e6:4d:b5:bc:f4:41:10:41:
d2:bf:14:df:09:95:e9:82:c3:c8:26:2b:46:27:8b:
c2:b1:2b:fb:5a:89:b7:d4:65:52:51:15:b2:97:08:
ad:fd:b7:2f:eb:37:3b:46:b6:27:3d:b2:e9:f6:2e:
3c:ed:78:0d:f1:e5:93:e4:5f:68:f9:c4:de:d9:3f:
da:26:89:15:04:38:6b:e5:6f:64:3e:18:b5:8f:63:
48:e2:d3:36:da:82:62:d1:91:5a:c4:7c:a4:ca:06:
b6:dc:0e:8a:51:c5:08:d4:4a:10:5c:c0:f0:30:86:
30:b1:43:bc:8e:e5:1f:95:bd:ae:54:d5:ca:f2:c7:
ce:c1:bf:10:57:5f:6a:1b:04:21:58:ce:0e:aa:42:
62:58:d8:a5:eb:18:ff:6a:e7:fb:e8:3a:21:70:d2:
08:dc:52:a1:3b:db:00:e4:d9:1c:55:5b:82:3f:3d:
45:70:ab:38:03:23:b6:f9:a9:97:89:77:6e:0b:67:
56:da:fc:12:5d:9c:65:53:d5:13:fd:c6:ba:a9:16:
99:97:eb:7e:27:7a:a3:0d:92:2b:9d:00:fd:b3:83:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:F5:C4:9F:08:AA:17:3F:9F:C1:91:5A:85:34:E5:E3:1F:AB:8D
X509v3 Authority Key Identifier:
keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/B5F911E8429411EC8882FA1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.199.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7f:56:e6:30:69:b8:ea:cf:8e:8a:06:5b:44:0e:b1:b0:26:
00:c1:16:9f:9a:19:af:b5:a2:a3:3a:cd:94:66:eb:76:e3:aa:
98:3e:7f:dc:e6:00:ff:ff:e5:f4:a4:7b:b2:d3:86:d9:af:8d:
b6:2f:c9:37:7c:e7:60:02:40:e8:bb:8e:2a:73:4e:3a:d6:e7:
d0:56:fd:74:7c:6b:6d:62:7e:3d:e8:4e:8d:a3:12:81:7a:02:
70:f5:a2:05:7e:dd:99:62:7a:d1:46:3a:83:0f:57:bb:12:07:
b3:49:97:32:cc:d0:b2:f8:e0:4b:6f:7b:65:fe:80:a3:8d:10:
b6:60:b0:cd:59:c8:ee:42:4e:94:21:f2:b0:9c:3b:7f:59:ed:
ab:1e:e7:45:5b:26:06:8a:e6:a0:f5:23:da:ad:62:70:94:94:
a4:1b:cb:8e:55:5f:33:dd:82:38:1b:88:69:b2:03:79:c5:c9:
6e:ef:3e:f2:1b:07:ea:08:f4:28:3d:e8:f8:61:25:2a:a2:68:
ff:fd:94:83:81:07:e5:95:4b:a2:fa:b5:c1:34:02:90:a7:cc:
7d:25:f3:fb:c3:c3:aa:d4:78:d1:94:c1:51:dd:82:04:1d:a7:
71:5a:6c:b6:0b:2f:15:cf:42:5a:f3:74:88:a4:84:e2:3c:5a:
5b:f7:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:16:19 2025 by rpki-client