Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/E9399E722E7211EDAE100C3DC4F9AE02.roa
File: E9399E722E7211EDAE100C3DC4F9AE02.roa (raw, json)
Hash identifier: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=
Subject key identifier: 57:2C:9F:FC:76:76:DA:8A:33:44:90:32:6C:6C:4B:47:34:58:6C:2E
Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321
Certificate serial: 01C9
Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/E9399E722E7211EDAE100C3DC4F9AE02.roa
Signing time: Fri 29 Nov 2024 01:54:53 +0000
ROA not before: Fri 29 Nov 2024 01:54:53 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150304
IP address blocks: 103.217.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF848
Validity
Not Before: Nov 29 01:54:53 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67491eed-ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:2c:01:8f:e1:1a:1c:1e:e4:fd:5e:b5:36:
06:07:81:6a:74:3d:b2:0a:65:8b:a2:98:45:5e:7f:
70:29:0d:96:00:26:4a:54:9e:55:b1:96:b1:ba:44:
b1:12:db:07:36:b6:b6:99:bc:40:50:11:64:21:de:
b0:2e:97:de:1a:4f:9f:77:f5:fd:f6:ec:c2:01:fa:
4f:da:c2:99:56:fd:ee:e6:85:5d:62:1a:e9:3c:cf:
f0:f6:71:4b:26:50:c0:5d:5d:bd:cd:9b:67:43:8e:
c5:72:58:4e:10:bd:39:63:fd:e5:7b:57:de:64:4e:
74:37:e5:5b:ae:5c:aa:a3:ab:86:63:88:67:10:ea:
2a:3e:a5:48:ff:59:d1:f4:30:d9:58:91:ba:a3:ee:
4d:e1:a8:2a:e9:2c:56:23:f7:2c:68:c6:32:27:3f:
69:7b:20:1d:ce:81:ee:4b:af:4f:0c:56:a7:4d:3a:
20:67:26:0f:a1:21:6c:6c:de:a7:7c:f5:2d:f6:2d:
23:55:b1:48:dc:96:9f:ce:8f:00:72:56:b3:31:89:
6e:7f:a8:cf:88:dd:fd:7d:c3:51:f9:ef:c6:62:ad:
52:bb:58:e6:40:d8:77:38:4b:77:d8:ca:2e:93:70:
f4:47:76:10:a2:d4:3f:21:82:bb:48:4f:ad:3e:93:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:9F:FC:76:76:DA:8A:33:44:90:32:6C:6C:4B:47:34:58:6C:2E
X509v3 Authority Key Identifier:
keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/E9399E722E7211EDAE100C3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.250.0/23
Signature Algorithm: sha256WithRSAEncryption
56:42:ec:13:93:a0:28:27:6f:6a:c2:e6:fc:c8:24:db:79:38:
0a:a1:28:5a:a4:e2:d1:ca:d9:3c:a4:62:fe:05:9f:67:bb:39:
a4:d1:0e:a6:88:f0:36:8a:0f:5e:a8:03:82:66:9f:90:3c:eb:
d9:51:b5:9c:92:c0:ad:a0:b1:9f:b7:f0:a0:f4:17:ca:99:6f:
c3:a1:61:43:79:76:be:98:72:1d:d0:b3:50:08:d4:e3:8c:6f:
b9:fb:81:8b:41:7e:b5:49:ae:c9:a4:23:54:66:4f:b0:fe:72:
77:ca:ee:31:34:12:66:9f:27:81:47:b8:93:d2:1d:f4:93:ea:
5c:8e:f8:4e:bf:a6:8e:18:78:a2:d1:c9:e4:db:1c:28:a0:c1:
79:b0:d5:99:e8:9b:7f:de:b6:80:89:ee:95:3f:e6:48:ea:0f:
02:68:a7:51:84:e8:ac:9b:b8:5f:a2:60:80:60:f9:bb:34:a1:
d1:22:1d:a6:bb:16:af:18:95:0d:c3:36:aa:0d:4b:24:a7:b1:
7a:2e:4b:ba:dc:59:c5:bf:7a:30:2f:73:97:d5:ae:09:7f:91:
80:cf:a4:ef:0a:4c:8f:ff:c2:f8:03:a3:35:14:61:c9:1a:d2:
ce:f5:03:d2:79:b9:38:04:cf:1e:cb:7d:ec:03:53:5c:0c:21:
d8:14:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:00 2025 by rpki-client