Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4C6F9CC749711EE9208C855C4F9AE02.roa
File: E4C6F9CC749711EE9208C855C4F9AE02.roa (raw, json)
Hash identifier: ehH/gemNLKZfiKRi1kKtCZ9hi8mkkrNrUAy706Rw1SA=
Subject key identifier: D8:66:58:01:F7:D2:94:25:AB:DA:FE:5E:A1:3B:47:48:B6:54:F7:51
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 3A
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4C6F9CC749711EE9208C855C4F9AE02.roa
Signing time: Fri 27 Oct 2023 07:10:22 +0000
ROA not before: Fri 27 Oct 2023 07:10:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 134475
IP address blocks: 103.237.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5
Validity
Not Before: Oct 27 07:10:22 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=653b625e-79bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:33:8a:df:8e:6f:63:cd:64:b6:16:62:96:
15:f5:f0:74:58:10:b7:8c:40:24:48:56:be:5b:84:
85:58:02:c4:37:4d:d1:d6:20:7f:6a:22:7b:f1:d4:
b4:08:03:d6:86:75:b8:c7:60:bb:54:f6:7c:78:8c:
24:36:95:a4:46:ae:34:1b:44:3c:e7:51:4f:29:1b:
2c:88:f3:d1:56:c0:24:6e:75:30:fd:4c:b5:41:95:
04:df:82:90:61:1c:c6:41:8f:43:93:7f:33:5f:6e:
3b:f2:28:07:f7:0f:5f:d1:34:dd:18:8e:30:bc:bf:
d9:85:d9:8d:40:da:7b:2f:d0:1a:d1:0d:87:8f:56:
d6:c4:e5:a7:49:2d:97:70:75:d1:d1:c5:68:35:9f:
45:7a:7d:63:db:ea:6c:23:b6:97:a8:55:7b:2d:1b:
68:6b:1f:e3:b8:81:95:2e:9f:ce:45:4a:b0:c7:73:
26:14:5a:68:b5:11:9a:cb:a5:89:6e:d7:d3:81:f1:
74:68:e7:de:fc:23:75:d1:55:3c:78:d5:20:7a:d0:
c8:b7:fb:f0:52:76:ad:04:27:a0:57:cc:7b:3d:55:
a8:a9:bb:f5:5a:15:c1:a0:58:9c:34:f3:17:41:06:
b9:e8:ca:85:b3:55:f7:d3:9b:72:1b:a6:22:ad:05:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:58:01:F7:D2:94:25:AB:DA:FE:5E:A1:3B:47:48:B6:54:F7:51
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/E4C6F9CC749711EE9208C855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.112.0/24
Signature Algorithm: sha256WithRSAEncryption
52:55:3e:5c:5e:1c:2a:e3:cf:88:89:1b:0c:ce:b7:8c:d3:96:
99:9d:c4:9c:72:cd:97:10:d6:83:c3:5a:7b:e5:1f:2a:56:18:
f2:56:2d:0f:21:dd:58:40:a6:63:b0:c8:b4:fd:78:38:e8:17:
1d:36:cb:7e:fa:e8:ba:1b:e5:3f:fd:cf:33:99:20:7f:94:46:
58:ea:32:e4:d7:ba:69:45:ab:27:dc:5d:10:1e:69:90:84:df:
da:fd:dc:c4:f6:82:1e:6c:2e:3f:ab:cc:fe:42:a5:2e:83:63:
26:18:04:db:80:5e:87:46:53:32:d9:6e:89:ba:e3:a6:7a:db:
cf:0c:dd:1f:be:d7:0f:59:be:8b:c3:35:63:82:84:cf:c7:c0:
72:01:71:8c:c4:2a:ca:95:43:60:66:0c:9f:fb:bc:37:40:02:
77:3e:ab:f9:53:1f:91:31:61:cd:b0:b7:c5:51:28:5a:d8:92:
c1:f9:5d:fc:79:25:ac:9a:c4:28:65:72:32:a1:08:c6:51:02:
39:46:fe:ba:b0:e7:41:64:bd:88:fc:9f:4f:b4:19:6b:b3:5d:
7a:af:e6:7a:58:af:aa:a7:1c:ca:c6:cc:b2:d4:64:5a:46:92:
9d:7d:8d:b0:65:26:dd:a0:f3:61:6e:5e:61:2c:0d:cf:4a:4c:
a1:33:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:59 2025 by rpki-client