Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/C4B01350CFA211EFB5331884C4F9AE02.roa
File: C4B01350CFA211EFB5331884C4F9AE02.roa (raw, json)
Hash identifier: XQjZHfOUSLDMW7ozOTzcITnimohiSmZhz7oBORPXHEw=
Subject key identifier: A7:3A:9B:7C:D7:0B:B3:51:42:D8:3D:6F:33:7D:17:C5:6A:91:57:AD
Certificate issuer: /CN=A91B80AB/serialNumber=210C49FA0F44F26DDEB89092F3972DAEB28B033B
Certificate serial: 0491
Authority key identifier: 21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/C4B01350CFA211EFB5331884C4F9AE02.roa
Signing time: Fri 10 Jan 2025 22:32:26 +0000
ROA not before: Fri 10 Jan 2025 22:32:26 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 139628
IP address blocks: 103.147.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80AB
Validity
Not Before: Jan 10 22:32:26 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67819ffa-1f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:c4:ae:d3:50:69:78:01:de:dc:bc:59:51:
13:4e:a3:06:80:ce:68:10:65:b8:2b:b1:1c:28:61:
ea:7c:bb:77:5e:ed:e0:69:19:7f:41:2a:04:4b:89:
c6:dd:fb:62:29:f1:46:2b:c2:50:44:c3:11:b1:37:
1e:f5:82:16:2d:14:79:6e:7b:63:18:c5:a4:5a:f9:
c3:3f:09:b4:5c:b8:22:07:3d:47:ed:c4:55:91:76:
aa:1e:5c:a7:78:e3:3a:69:63:52:7c:4e:b1:e4:87:
87:87:cd:3e:2a:55:79:d4:e3:55:52:ee:5d:22:ac:
5e:ae:7e:91:63:f1:20:99:7f:90:6c:30:bf:55:d4:
a0:27:39:6a:0a:af:8a:cf:4f:0b:33:3b:d5:c6:6a:
c3:fa:8a:80:ba:0a:b6:dc:c8:df:d6:29:5c:ec:52:
c2:ad:ca:5c:6c:79:e4:b3:05:da:19:e6:ac:94:0f:
ff:d5:ca:73:63:9d:d8:ef:41:4c:bf:cb:e0:6b:d6:
74:d4:9c:a7:46:0c:dc:50:59:c4:a2:63:f8:b8:06:
6a:28:ed:7e:e8:6e:a5:27:79:da:ad:c1:18:e5:86:
13:2d:e0:6c:11:af:5c:3e:79:1b:e8:24:c8:59:5d:
d8:2d:c1:9d:5d:7a:08:16:18:f8:cf:85:4c:8a:52:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:9B:7C:D7:0B:B3:51:42:D8:3D:6F:33:7D:17:C5:6A:91:57:AD
X509v3 Authority Key Identifier:
keyid:21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/C4B01350CFA211EFB5331884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.234.0/23
Signature Algorithm: sha256WithRSAEncryption
62:78:eb:9b:a2:04:18:c4:07:a2:b5:fa:7e:e9:fa:1e:f3:61:
0d:c5:c6:90:43:36:a6:27:54:20:26:fa:30:05:18:35:41:1d:
d7:13:fe:fd:d4:39:93:ac:74:33:cc:13:28:40:5d:c2:a0:ac:
b9:77:1d:03:6e:87:63:2a:01:f4:f5:b7:8d:cb:af:33:f6:ce:
d2:f9:21:e5:7a:05:ed:a3:55:61:f4:7b:4e:9b:53:fe:99:e2:
cc:da:aa:a8:41:ff:f2:2f:9e:fb:9a:27:19:1f:d6:b6:9b:c3:
b3:ad:3a:40:dd:08:53:de:ad:32:9b:11:79:b5:6f:ba:0c:d4:
ea:56:cc:a9:ec:b5:3a:f5:65:aa:91:0b:60:4f:f5:f0:3b:ca:
6e:e3:41:24:33:00:0b:e3:89:2a:f8:65:fd:15:07:f6:58:12:
9c:1c:c2:f5:b2:7b:1d:dd:da:19:1f:bf:2c:d2:66:58:fa:00:
1d:ae:36:bc:d5:56:ad:bb:02:40:9e:04:4b:ca:fa:f8:d8:1f:
a8:5e:f7:06:76:58:0b:ad:81:80:9c:eb:74:f2:a1:fb:08:de:
fb:29:fe:a7:2d:55:b7:b4:6b:e2:fe:00:01:50:39:21:99:e8:
d9:31:50:4f:af:63:c2:91:bd:0b:6a:be:f6:c3:bb:6b:c3:f4:
b3:c6:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:19 2025 by rpki-client