Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa
File: 0298821631FB11EEB97E483EC4F9AE02.roa (raw, json)
Hash identifier: YHL50uw1YvF1ixfQSUl0njvJoYefcHABaLRCFe3SnLs=
Subject key identifier: 2C:42:08:CC:D1:6A:61:94:45:CC:02:04:64:09:A9:EE:7E:62:EA:BE
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 0991
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa
Signing time: Tue 02 Jul 2024 20:47:49 +0000
ROA not before: Tue 02 Jul 2024 20:47:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140900
IP address blocks: 103.203.45.0/24 maxlen: 24
103.203.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC
Validity
Not Before: Jul 2 20:47:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66846774-5b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:36:42:6f:ee:22:83:80:7e:ad:d7:bf:2f:
21:6d:ea:ed:a8:83:97:1a:30:f4:8e:89:43:c2:7f:
27:23:3f:1b:62:d0:7d:2f:01:42:03:7a:b9:2b:ca:
9b:84:2f:c3:a4:80:27:59:7e:0d:9d:77:68:c2:02:
57:77:8a:29:f3:76:ad:24:38:eb:11:df:00:18:5a:
06:21:32:f6:54:3f:9d:e7:33:62:a4:1b:e7:d8:53:
af:6f:59:24:66:f8:45:be:80:6e:ec:32:a3:d1:47:
43:ea:8e:17:0c:4d:ef:54:6e:71:b7:3d:e6:ab:05:
9f:6a:b4:24:dc:ad:8e:bd:4c:f6:58:7f:54:81:28:
4e:be:06:dc:d4:c3:bd:a2:0a:c9:80:a0:ac:65:01:
d9:23:79:69:b2:98:6a:07:fb:90:e0:a2:f6:54:f6:
b3:de:1a:d1:30:fa:e6:21:ec:b8:5b:f4:02:06:26:
16:83:93:b0:22:8f:89:62:dd:92:6b:cc:b5:2f:3e:
0b:3e:83:56:ba:80:8f:d6:d4:22:e1:2a:97:0b:21:
4e:eb:23:54:1b:d5:81:b1:e9:4e:f0:f3:fd:8a:d2:
4a:15:7f:5d:a3:13:ed:93:ce:d3:fb:c9:cc:31:25:
f6:fb:99:c7:80:0a:92:10:f0:94:51:10:81:17:11:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:08:CC:D1:6A:61:94:45:CC:02:04:64:09:A9:EE:7E:62:EA:BE
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/0298821631FB11EEB97E483EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.45.0-103.203.46.255
Signature Algorithm: sha256WithRSAEncryption
66:ba:88:5f:58:38:e9:52:77:92:cf:3a:b3:ef:fc:41:47:7f:
2c:76:a3:a6:9c:dc:5c:d2:f7:84:cf:0a:eb:12:c3:9e:53:67:
53:e1:d8:85:99:fa:6c:1c:c4:aa:64:8c:56:79:eb:8d:88:6d:
82:66:ab:5c:34:ae:98:10:8e:b2:ed:94:c2:2a:2b:6b:a8:74:
f8:54:74:de:e4:ae:de:4e:fb:90:a1:00:f3:25:da:d6:9a:3e:
c9:16:aa:ad:0d:98:4d:f4:e2:49:97:b3:38:2f:74:4d:e2:16:
f0:0b:cc:6e:ca:75:5a:30:33:14:bf:db:17:b6:77:c1:bd:16:
9c:85:10:ba:ef:ca:5d:b4:a9:0d:ff:3b:db:15:66:d3:55:1c:
2e:01:c3:d2:94:98:cc:0d:05:67:cb:10:f1:54:fe:ee:d3:6a:
a3:d9:43:06:d2:96:a5:ff:c4:ac:40:8c:09:e4:d1:c9:b3:4c:
f4:4d:2b:6d:03:d3:77:57:56:b7:a4:d3:72:e9:d3:b8:13:bc:
e3:4d:c5:60:cc:0f:2d:6c:fe:b1:42:df:d5:6d:de:bd:18:7b:
11:0a:13:6f:de:05:86:0c:8b:83:5a:0f:57:2a:42:8e:ce:3d:
8f:69:ab:c5:86:5f:8d:c2:36:1f:90:c3:3a:3f:15:2c:d5:d7:
99:7d:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:26 2025 by rpki-client