Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa
File: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (raw, json)
Hash identifier: Zx75smDZoCLc3BQeMy0zIEYFPQvHS5X5/v68oiFszVU=
Subject key identifier: 94:48:38:10:CB:B0:BD:13:AB:95:D3:43:FA:83:6E:E5:F6:CD:6E:83
Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial: 0FE0
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa
Signing time: Fri 26 Jul 2024 08:40:59 +0000
ROA not before: Fri 26 Jul 2024 08:40:59 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152676
IP address blocks: 103.24.132.0/23 maxlen: 23
2406:bf00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4064 (0xfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF285
Validity
Not Before: Jul 26 08:40:59 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a3611a-bbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:56:1d:9d:96:a7:31:e6:82:24:bd:84:ca:
86:56:63:ff:b2:fa:d2:dc:f4:55:83:97:2d:cb:ed:
73:db:ed:9b:c4:94:44:0b:63:b1:3e:b6:cb:78:0d:
df:e8:14:0e:41:d7:b9:af:d4:a7:ca:c6:67:5a:de:
e9:a8:dd:64:22:5a:f3:90:d8:19:d1:60:2b:6a:9b:
15:e4:78:5e:07:2e:60:5a:69:ac:36:04:b7:74:9a:
c4:db:9c:0a:1a:68:c6:b4:b1:73:fc:68:9f:d3:8e:
ff:72:8f:87:da:dd:cc:bc:68:d3:36:18:98:d7:87:
82:cc:f7:4e:e9:c1:b4:d7:b6:99:e9:7b:68:d1:b0:
47:cb:fc:88:0b:6b:5c:0c:01:38:84:20:4c:99:92:
82:ec:ca:b0:b4:94:5b:6c:12:14:82:30:ff:da:2e:
33:b2:2f:2c:aa:c3:ef:af:55:88:4a:fd:16:5d:6d:
53:54:d1:4b:15:3b:d6:c3:7d:03:3d:79:84:d3:f9:
a3:d1:e0:e5:8a:a5:3e:70:d6:72:11:26:68:ce:bf:
64:e4:01:a3:05:28:19:6e:db:16:5c:8c:26:3b:8a:
fd:6b:06:ee:95:8c:66:20:b1:3c:0b:a9:91:4b:81:
83:00:2a:bc:5a:b5:b3:75:bf:56:b7:1b:c9:ee:c6:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:38:10:CB:B0:BD:13:AB:95:D3:43:FA:83:6E:E5:F6:CD:6E:83
X509v3 Authority Key Identifier:
keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.132.0/23
IPv6:
2406:bf00::/48
Signature Algorithm: sha256WithRSAEncryption
34:8f:95:c0:5d:3b:a7:da:02:e8:17:13:d8:de:01:83:14:4a:
a9:cc:6a:4b:77:d1:ae:c6:a9:07:ec:c7:2b:b6:58:3f:23:4e:
10:ed:18:ff:b9:0b:b8:5c:09:92:8d:43:93:a8:bc:48:95:0e:
ef:80:1c:fd:a6:3a:b7:ff:73:e4:77:7d:9b:87:b7:63:e0:0a:
18:cd:20:14:31:db:a8:3f:7f:00:b2:2b:d6:78:13:92:4b:93:
af:50:8b:89:4a:b2:e7:cb:5a:71:1a:f0:57:4e:6e:87:98:68:
c4:b4:64:56:6d:fb:59:76:77:32:cd:de:40:a1:78:a1:52:94:
c3:59:fb:70:19:94:14:b6:9d:bb:52:41:65:15:21:c4:18:d1:
60:7b:03:bd:c1:21:cf:38:c9:ea:49:4b:35:f7:d1:b4:76:bb:
4b:6d:06:17:9c:d8:93:0d:02:7c:56:9f:68:02:af:49:66:ea:
04:5a:9e:e9:45:86:cb:d5:99:f8:f7:2c:80:d7:58:1a:8c:5a:
6b:13:b5:ce:f9:f2:e6:c8:45:73:e6:66:13:a0:10:a9:33:7e:
b3:87:f0:91:6b:b6:0c:27:8b:e5:39:ec:7b:52:a5:af:0a:53:
8b:12:98:03:6a:f3:fb:a4:7c:06:8f:a3:aa:3b:1a:6c:2b:5c:
c7:3f:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:34:10 2025 by rpki-client