Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa
File: 020A31F812B011E7A7C42661C4F9AE02.roa (raw, json)
Hash identifier: N/QKwYU99zSxNpR5M+QspbIb1HfEPDfTD2V5TEy4RLU=
Subject key identifier: 1B:F5:26:9A:97:F2:82:B8:82:34:00:34:CF:DC:81:65:47:4F:05:A1
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1A81
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa
Signing time: Thu 02 May 2024 17:04:44 +0000
ROA not before: Thu 02 May 2024 17:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136430
IP address blocks: 103.87.203.0/24 maxlen: 24
2001:df0:9500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6785 (0x1a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5
Validity
Not Before: May 2 17:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633c7ab-5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:4b:dc:74:96:c2:bb:02:02:f1:67:9f:ae:
f7:2b:ba:6a:41:ed:3b:73:29:34:54:e2:67:47:6a:
ab:59:ba:44:5f:05:31:dc:5b:bb:d1:28:64:0f:ad:
6f:9b:f9:93:c2:9e:83:7c:a0:b0:fc:0c:87:7d:76:
45:15:ce:e9:bb:79:2b:48:d8:5f:fb:79:ec:93:df:
bb:44:04:0f:fc:67:4d:84:5f:ed:8f:68:28:a2:71:
01:c6:48:a6:42:36:30:ed:0c:6b:c8:49:88:d8:49:
7e:e4:8b:8b:ef:d1:48:d2:0e:28:db:44:8c:56:dd:
2e:53:26:0c:dd:cc:2a:2d:51:bb:4f:8c:0c:02:62:
9b:7c:f1:43:f5:d1:0c:4a:1c:a3:cf:02:00:18:7d:
45:89:a6:17:a0:33:93:a3:f1:52:d3:5f:e5:ab:d0:
ce:66:b7:64:c1:24:3b:cd:ff:0d:cf:84:56:17:c2:
b6:3b:6b:6e:f1:2b:75:2d:8a:3d:33:e4:0c:db:98:
e9:22:f5:23:ef:ce:21:2c:22:62:60:8f:86:c0:0c:
73:52:a0:e1:c8:f4:c4:2c:e4:2f:89:ea:fe:36:34:
df:30:77:01:d6:a8:60:44:4e:3c:58:88:94:52:9f:
bd:1f:65:09:19:7a:24:f8:5f:d1:29:37:9f:82:ca:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:26:9A:97:F2:82:B8:82:34:00:34:CF:DC:81:65:47:4F:05:A1
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/020A31F812B011E7A7C42661C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.203.0/24
IPv6:
2001:df0:9500::/48
Signature Algorithm: sha256WithRSAEncryption
b1:15:2d:11:13:c2:b6:b4:3d:18:03:df:42:6a:20:44:d5:5a:
f0:0d:64:65:53:1a:bf:7c:5e:16:2a:d4:09:84:37:49:a2:10:
89:10:76:44:92:21:c5:8f:8f:88:ce:23:b5:d5:c0:23:60:b9:
94:4a:5a:71:c2:bc:02:01:f2:54:3e:96:60:3e:4e:f9:27:b2:
67:77:24:b3:51:51:7a:1a:59:7f:a3:c6:b9:f3:5f:f1:96:ff:
ac:5c:18:54:6f:c1:52:9c:e5:4c:4b:f2:7f:bc:1f:2c:75:77:
90:f7:31:46:61:9f:2c:23:b7:a0:ec:e5:50:80:21:94:34:2b:
b8:c5:9b:c5:3f:a0:87:af:d0:9d:a0:fa:b0:0a:b5:18:99:ca:
f0:7a:4d:68:c8:05:c1:7d:06:88:39:fe:9b:44:5a:0c:0b:e3:
52:84:5e:9c:73:b0:4f:62:67:f5:55:9d:68:59:b1:c1:4e:d6:
08:55:c3:53:53:1e:87:62:6f:27:e2:8a:41:44:f5:ab:c6:3d:
8f:c1:54:d1:bd:34:42:19:5b:6b:7f:94:5e:d7:81:b8:21:57:
e7:af:ee:da:f2:6f:15:68:06:0c:a6:85:00:99:b3:d9:ec:d6:
0d:cb:4f:5c:a8:e6:05:b9:4f:66:6d:ac:7b:5a:2a:0c:69:66:
d0:f4:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:09:03 2025 by rpki-client