Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
File: EEE4C606B5D411ECA20B840AC4F9AE02.roa (raw, json)
Hash identifier: 0XMlIXCMAiJZlp7fDiVuLUwSsm0ebLntYydTAPsauDo=
Subject key identifier: B3:DA:EE:CF:F2:80:6A:E5:CD:54:2C:18:99:DD:AE:9C:8F:BC:18:A3
Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial: 06AF
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
Signing time: Mon 02 Sep 2024 23:21:36 +0000
ROA not before: Mon 02 Sep 2024 23:21:36 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 141398
IP address blocks: 103.140.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1711 (0x6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA1A6
Validity
Not Before: Sep 2 23:21:36 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d6487f-f33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:51:36:7f:d0:23:1f:93:ec:31:3b:05:fd:
68:04:b8:68:f3:a3:36:8d:03:54:07:76:b6:04:c9:
c2:c5:5c:96:65:b6:f5:66:a2:b4:0d:76:bc:3a:09:
a5:74:08:60:88:d8:d0:bc:4f:5c:2d:cd:eb:1f:f0:
fa:ef:eb:4b:12:71:c1:94:1e:86:13:00:74:3f:35:
61:8b:ca:4e:43:d4:4c:76:9b:35:e2:dc:90:66:6b:
26:1a:05:f4:ac:e0:a9:b9:34:f3:c6:64:f0:65:4c:
b6:df:41:26:a8:25:47:f7:ba:e3:05:1d:d7:4c:ec:
8c:e9:fe:11:01:69:49:d0:5d:d9:2a:11:c3:ec:0c:
43:9d:c8:20:de:3d:6e:53:9a:f8:85:b3:a8:11:d8:
52:28:6b:04:79:c7:d7:eb:58:90:04:4b:22:92:9e:
59:8a:2c:cd:1e:74:77:59:d6:5d:ec:33:47:d6:6a:
7f:a7:60:92:ce:46:e4:4b:0c:e5:f9:5d:85:6d:c2:
17:ef:66:c7:b7:61:c0:4b:a6:e7:61:94:ae:dc:a3:
e3:4c:e9:95:70:2c:61:4b:33:13:40:15:81:2a:a8:
d5:a0:47:8f:97:a3:83:41:eb:ed:e2:0a:29:60:a4:
48:13:70:de:cc:b3:43:f8:61:90:ec:46:e9:2c:1f:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:EE:CF:F2:80:6A:E5:CD:54:2C:18:99:DD:AE:9C:8F:BC:18:A3
X509v3 Authority Key Identifier:
keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c2:7a:be:7a:b2:61:47:b9:92:18:93:77:de:2d:39:aa:63:
98:5f:1d:7c:9d:a0:ad:c4:d5:b1:a3:67:f9:71:61:6c:ce:c9:
f3:03:cc:ab:0c:76:d7:77:48:88:27:39:8f:b2:12:c7:0f:f3:
0d:fd:23:e5:8e:05:74:64:27:08:57:65:c0:a7:10:b4:aa:36:
ca:ea:fe:bb:ec:f1:98:8d:ce:29:c1:5c:6e:93:21:2a:99:8e:
07:50:53:bb:2e:64:4a:9a:51:83:58:fc:cb:ca:2c:bf:e2:f3:
49:32:1f:9a:1e:12:9a:6b:e9:4a:78:0e:42:8d:58:44:9f:24:
84:58:20:bb:c1:73:d6:1d:17:04:37:09:c9:7e:40:9c:ac:c0:
15:eb:e7:c8:4a:0e:e0:58:12:55:bd:7e:5a:09:89:9c:57:9b:
fc:a4:9b:da:38:43:1f:bf:b3:f4:5d:6a:b7:29:44:75:8c:0d:
88:8d:bc:d4:88:b7:82:11:04:5b:30:74:eb:52:f3:a4:cf:cf:
7e:9d:2e:e7:a4:71:40:f6:01:f5:c6:f7:69:29:5a:e0:29:4c:
77:fb:fc:92:6f:b2:d0:f3:34:91:13:c8:11:5d:bf:ae:a7:c9:
26:b8:db:8f:a3:b0:0a:eb:3b:ac:40:bc:d9:c6:5d:b7:a9:28:
49:e1:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:34:47 2025 by rpki-client