Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
File: E2663F929C9511ED8014F84CC4F9AE02.roa (raw, json)
Hash identifier: 6Y5tviiZDDG9UDEgc5UyI9seFOB72fV6jZ50KDgSVtg=
Subject key identifier: 4D:C7:0E:55:1E:2C:8E:E4:B5:6C:40:38:FF:B9:43:DE:57:13:8E:AE
Certificate issuer: /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74
Certificate serial: 04C6
Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
Signing time: Sat 31 Aug 2024 01:34:25 +0000
ROA not before: Sat 31 Aug 2024 01:34:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137385
IP address blocks: 103.170.185.0/24 maxlen: 24
2001:df7:2580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9670
Validity
Not Before: Aug 31 01:34:25 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d27321-5342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:49:0a:8a:3d:c4:9b:e2:94:64:a3:a2:3f:
88:e3:a6:bc:f5:09:59:57:0a:8e:d2:71:35:4c:42:
55:29:f0:bc:73:65:01:b8:8e:b8:bf:ef:51:dc:0f:
1d:0b:bc:67:ba:e9:9e:d8:4a:3a:44:0c:5d:27:46:
0e:ea:60:f0:68:a7:d2:00:b0:4d:da:55:1c:4f:ea:
90:8f:38:67:8b:82:08:1e:01:bd:bf:ef:f8:50:34:
f3:97:5c:c2:b8:f8:a9:6d:30:55:6c:94:4a:09:be:
42:99:d1:14:ef:4c:cd:94:61:16:5e:4e:1d:0f:44:
b2:6c:67:68:12:cc:45:63:d6:19:31:2d:ba:30:ca:
00:eb:e8:59:4e:e5:ee:5b:66:57:86:f4:89:0c:ca:
a5:09:a8:42:38:6d:ab:69:b9:96:c9:44:c6:81:ae:
de:66:3a:99:a5:9f:10:f2:86:61:91:9b:35:d7:5e:
99:3e:bf:e6:7f:86:3b:61:15:bf:c3:e6:f8:29:85:
55:e9:1e:e2:10:ad:61:47:dc:0b:14:35:1e:d4:dc:
95:4d:ff:25:cd:c7:f4:11:21:99:b4:11:ad:1b:9c:
a7:bd:6d:23:b4:31:fb:f5:50:e4:64:0b:1d:f8:a3:
b6:ce:25:2b:ad:62:1c:bf:23:97:4e:b6:9f:f6:1e:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:0E:55:1E:2C:8E:E4:B5:6C:40:38:FF:B9:43:DE:57:13:8E:AE
X509v3 Authority Key Identifier:
keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/E2663F929C9511ED8014F84CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.185.0/24
IPv6:
2001:df7:2580::/48
Signature Algorithm: sha256WithRSAEncryption
62:9d:14:21:51:50:74:7a:ff:da:df:25:47:2f:0e:39:39:5b:
57:df:2a:ba:5a:73:42:8a:41:fc:a4:72:66:d0:85:62:10:b4:
7f:b8:0f:df:a7:c9:2c:1d:30:2b:b5:43:d7:13:7c:13:66:99:
d9:96:b6:56:96:e7:bd:97:9b:70:6b:1f:24:95:dc:a8:00:9b:
68:ba:0f:28:17:ad:dc:4a:c5:95:fe:0c:e9:ff:2b:aa:0b:53:
3a:40:63:89:7b:33:9b:e9:db:fa:28:a9:5a:59:f1:83:17:04:
b4:f4:ca:0c:b2:d1:a4:99:84:38:a3:e9:0e:9a:50:2e:24:18:
53:30:ef:cf:49:11:45:b4:bf:e1:a1:37:fe:e7:1b:cf:ff:6d:
74:74:2f:89:2e:be:c0:0d:69:c9:96:11:c7:88:f8:a7:c5:ee:
2c:a8:f0:93:41:e5:59:9b:7f:d7:09:fc:26:ab:6f:f4:1d:e9:
f4:a9:c3:1d:5c:f8:98:4b:7b:da:ce:33:1a:04:a9:68:5a:52:
c8:5d:89:ba:d5:f4:3f:b6:30:1a:3d:67:28:a7:8a:8f:e7:cf:
32:18:26:8c:c9:11:94:0a:b7:6a:91:0d:ad:4b:72:fc:00:47:
18:97:8b:73:ba:e6:04:2b:eb:52:a9:be:dd:8d:c8:4b:db:b2:
1f:e9:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:27 2025 by rpki-client