Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa
File: 1D07036632DA11EBA1A7F93BC4F9AE02.roa (raw, json)
Hash identifier: 3v0WZSZ9WXyN0p5iCYS1oEpxr7FNjE1W1kGnGnmRkMo=
Subject key identifier: DA:8E:83:A2:06:10:9E:DA:EC:9D:26:C8:75:74:4F:99:3A:4C:47:6B
Certificate issuer: /CN=A91B3C87/serialNumber=96CD0A6970D685B0CCEA3424E0944E84050EB7EC
Certificate serial: 0663
Authority key identifier: 96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa
Signing time: Thu 04 Apr 2024 18:56:46 +0000
ROA not before: Thu 04 Apr 2024 18:56:46 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 63968
IP address blocks: 103.52.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3C87
Validity
Not Before: Apr 4 18:56:46 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660ef7ee-f37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:4e:d4:6e:eb:12:73:28:f1:fb:e9:a6:41:
a9:02:1a:0e:85:31:3b:9d:12:3b:fa:20:32:fb:7e:
ba:83:69:77:85:8c:79:8a:96:1c:c7:ee:9f:3f:a1:
d9:fe:84:73:bf:eb:1c:32:12:63:b4:4f:78:8b:2c:
eb:f5:ce:1a:da:d2:77:7d:5d:48:76:94:de:78:87:
a3:83:33:c5:f1:3b:44:df:1c:d1:9f:63:09:15:76:
07:2c:a5:9b:b2:92:05:6b:1d:a3:8b:8b:4e:af:13:
d4:21:0c:3a:14:8b:b8:33:a7:95:db:31:d2:bd:e6:
83:39:87:a0:5e:8e:58:cc:de:4e:d1:33:1f:0d:51:
f2:6c:a2:06:e5:bc:ec:b4:9d:74:57:67:f1:51:0b:
f2:45:46:72:6b:71:20:ef:26:7a:77:c6:41:91:92:
62:02:33:3b:98:c7:57:97:cc:c3:bd:d5:7d:e7:ac:
46:16:11:09:92:88:63:06:84:7d:e6:65:04:56:96:
47:36:6b:88:a3:9b:75:b6:97:d8:a5:bc:a8:4a:c5:
bd:5e:f9:30:c9:46:b4:26:66:a6:c8:6e:10:f8:03:
30:b3:3f:31:ec:98:cd:c4:d1:86:31:e7:a4:35:18:
9b:de:00:32:06:e0:bc:3a:de:16:9c:d3:1f:6c:34:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:83:A2:06:10:9E:DA:EC:9D:26:C8:75:74:4F:99:3A:4C:47:6B
X509v3 Authority Key Identifier:
keyid:96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/1D07036632DA11EBA1A7F93BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:cf:45:2c:36:7b:79:c7:74:3c:67:5c:ff:12:2b:f6:85:f7:
ff:cb:2e:59:37:07:25:ee:9b:f4:d6:c4:cf:7a:df:b8:18:9f:
14:77:fc:82:c3:83:a3:8c:31:3c:02:a0:ba:71:45:87:b3:7e:
ea:fe:82:98:dd:35:72:48:84:53:43:ba:77:c8:98:89:80:e9:
e9:e2:e0:8d:5f:8e:0b:66:79:76:c3:c3:68:be:cc:64:50:51:
75:10:b9:d1:ac:a4:c3:a0:55:3e:66:44:85:d6:24:c6:1e:48:
fc:54:89:a0:44:1b:49:04:d9:48:7e:92:a8:8d:16:b2:78:a9:
ad:81:77:c3:2f:b6:8e:75:56:03:b5:f5:b4:35:54:ff:ba:fb:
82:13:09:8b:37:c4:a2:6a:44:c2:26:6c:45:c7:81:a9:4b:67:
b1:84:09:91:4c:ea:95:bf:99:47:a5:b1:35:4a:d5:d9:5f:e1:
db:29:93:a0:31:f4:98:f9:fb:b2:1e:65:f8:0b:d6:96:63:3c:
48:6f:b5:41:0a:62:fb:08:ab:54:28:15:f5:dd:4b:70:7a:aa:
8f:e4:a9:71:30:d0:e7:ec:7f:6c:cd:85:40:b9:72:d3:2a:9d:
08:38:d8:57:e7:21:fd:c4:0a:52:ed:ab:97:8d:7c:b3:2a:ae:
2a:eb:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:30:37 2025 by rpki-client