Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
File: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (raw, json)
Hash identifier: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=
Subject key identifier: E3:12:0F:93:9A:5F:D8:B5:A1:55:E0:93:A7:8A:04:B8:BE:7E:11:3B
Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial: 07F2
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
Signing time: Mon 02 Dec 2024 21:10:29 +0000
ROA not before: Mon 02 Dec 2024 21:10:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 134555
IP address blocks: 103.130.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB48
Validity
Not Before: Dec 2 21:10:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e2245-c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:f5:ba:6a:7e:62:50:57:52:71:35:53:58:
e8:2c:0c:b6:f8:8f:ae:fd:d8:90:ad:ae:95:5a:0f:
d8:4d:f6:b9:d2:a5:3e:af:a1:10:85:86:c9:73:c9:
1f:4c:60:58:3d:cb:c4:01:b0:aa:6e:25:5d:53:96:
85:1d:3c:7f:c5:f7:d8:da:29:d7:d4:47:1c:6e:ec:
5b:47:81:07:26:40:c9:ee:90:f8:24:b5:79:94:2c:
f5:57:9e:d5:3a:1f:6e:1c:54:f1:5d:ce:d7:74:16:
c5:75:fd:56:35:71:5d:86:12:0a:8f:4c:ca:0a:a5:
26:70:45:4b:5e:44:07:b9:08:c1:12:17:c8:91:ee:
59:39:da:ee:f7:68:9c:5c:d1:ce:27:aa:0f:2f:21:
c0:e8:13:c3:f2:d1:46:61:6a:b3:99:c3:2c:fc:11:
68:21:7a:3d:62:7c:7d:de:15:f4:62:48:ec:0a:84:
e0:10:a0:2c:1d:6d:be:7e:f4:99:29:1c:26:5e:50:
63:26:70:fc:5d:e4:79:3a:c9:c8:ac:48:4d:b5:f4:
6c:49:12:ee:21:48:dd:86:80:8a:86:96:5c:d2:10:
8b:13:e5:5a:b5:f0:1c:cd:3d:3a:a8:bd:7d:97:3b:
c7:53:38:e5:24:91:10:7b:bc:fc:6c:01:ec:28:36:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:0F:93:9A:5F:D8:B5:A1:55:E0:93:A7:8A:04:B8:BE:7E:11:3B
X509v3 Authority Key Identifier:
keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/96AC80A2CBB411EA99BB9A4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.244.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:f8:c6:2f:45:f0:c0:4c:23:b9:5d:81:ae:aa:37:88:e5:0e:
09:c3:71:f8:1b:12:f5:31:eb:f6:f4:61:d8:57:de:ec:4f:82:
37:c9:f5:3f:00:21:00:c4:97:6b:9d:35:bc:af:48:61:d0:00:
18:27:25:8b:8b:b4:a8:ec:fe:78:68:59:6b:6c:a7:7e:60:eb:
ea:83:e4:e5:eb:d2:ce:3a:f2:b5:ee:b5:53:25:c2:00:8e:e7:
f2:fc:e9:2f:d5:d8:7b:4c:5f:80:ec:17:e4:5b:71:c3:36:70:
40:a1:c9:e1:21:75:3c:df:45:5c:f3:90:d2:9e:83:37:bb:91:
63:10:e4:27:12:d2:3e:83:90:2b:37:32:a5:19:fc:2c:92:29:
60:32:47:c5:53:97:df:f2:46:81:09:95:c4:c0:69:7b:47:91:
9d:d2:ab:86:62:f9:f5:8e:d4:08:88:3f:02:5f:46:e4:1c:27:
b8:66:33:f0:ce:a7:2b:cf:d3:28:f2:a5:73:52:7c:7b:f6:9b:
6f:69:c2:df:c5:8e:c4:2e:64:b5:c3:d5:01:13:16:8c:7d:17:
65:1d:d0:cd:a4:23:9f:b9:55:36:c7:fc:c0:ed:4e:4a:51:5a:
1c:d4:60:be:05:2b:9c:d8:6e:fb:6e:d6:7a:c8:de:08:83:ba:
89:a9:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:47 2025 by rpki-client