Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa
File: 1752A952B44711EDB021F350C4F9AE02.roa (raw, json)
Hash identifier: gqGRbTS2iSh442924+yMqkcDFGOlblXuMkvDc/ZJRwc=
Subject key identifier: 5C:27:98:0A:00:94:14:CD:CF:05:D8:86:D3:09:FA:0E:D2:28:28:35
Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56
Certificate serial: 0C49
Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:36:59 +0000
ROA not before: Fri 22 Nov 2024 18:36:59 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 137045
IP address blocks: 103.102.246.0/24 maxlen: 24
103.102.247.0/24 maxlen: 24
2001:df1:4d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3145 (0xc49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D98FC
Validity
Not Before: Nov 22 18:36:59 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6740cf4a-7124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:cc:9b:e6:cc:d3:8a:47:eb:e5:94:3f:b4:
5b:c8:24:69:4a:3d:d3:9b:5a:a7:9e:a5:89:e9:f8:
7d:43:0c:8b:6b:05:6f:68:bf:50:73:0d:75:93:4b:
0f:2c:c7:80:d4:c6:d4:48:ce:92:76:7f:64:1a:57:
cc:1b:d7:a8:39:17:91:c8:d0:55:e4:ac:0c:81:d9:
50:96:14:aa:af:8f:99:b5:c8:e9:4b:78:ac:a8:cb:
0a:22:79:95:0e:f7:11:b4:46:bd:b6:52:42:79:eb:
57:58:53:d5:d5:5e:7d:83:a3:0e:42:16:b3:68:e6:
24:e8:9e:9b:db:19:cc:ee:40:48:04:96:5f:c2:3c:
0b:e6:c0:5c:ec:cd:f3:a5:47:9a:50:61:2b:6c:40:
7a:38:7a:00:19:78:59:0a:7b:16:92:be:c3:d6:d3:
a0:f1:b0:29:11:5c:7a:27:57:35:94:0a:4b:30:97:
62:e4:53:1a:f1:05:9e:dd:0b:05:da:4e:30:23:a0:
e4:d0:26:87:9c:c9:68:9d:04:36:36:6f:3c:9e:4b:
c2:c6:35:17:fb:04:84:3b:77:02:cd:e6:11:33:16:
80:a9:33:bf:e1:a1:37:60:bc:59:f2:de:b0:30:93:
cb:c5:6b:64:f5:a4:a7:51:3f:22:fb:1d:f0:22:c4:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:98:0A:00:94:14:CD:CF:05:D8:86:D3:09:FA:0E:D2:28:28:35
X509v3 Authority Key Identifier:
keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/1752A952B44711EDB021F350C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.246.0/23
IPv6:
2001:df1:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
32:8d:f3:1b:c5:60:34:bb:81:93:fa:9c:ca:9d:cc:84:5d:92:
b4:0b:fa:46:6e:4e:39:d1:ca:df:a6:4a:b1:10:ad:5c:75:cd:
9f:d7:74:a7:01:58:1e:b6:86:0a:f5:59:3a:7d:e6:ae:16:68:
c4:18:61:e1:62:7e:22:4b:a5:86:16:85:75:22:d2:91:9a:ad:
24:02:14:c9:d8:08:9f:39:46:2f:fb:fa:79:c4:82:9f:e5:f9:
23:6d:4f:64:45:f6:57:04:fd:68:49:cd:2b:57:bb:2e:38:33:
8c:75:1b:c3:8b:3e:be:27:a2:4c:7e:ca:12:f7:75:a3:a6:9d:
7f:66:fb:f9:ee:bb:5b:a0:ce:16:e2:f9:83:f2:13:90:f3:4c:
11:dc:00:34:96:20:ef:ea:b4:94:10:7e:27:f9:b3:04:3e:ed:
79:be:5a:33:ac:1f:ce:00:5e:a5:fc:98:f1:8d:c8:ce:70:aa:
b2:03:e3:8b:f9:4d:4f:6a:b1:96:b8:e7:0c:7f:3c:5c:12:d4:
6f:e8:1f:8d:db:1a:78:7f:7a:db:f5:3b:62:e5:84:77:f0:5e:
c9:0d:6b:39:6d:50:63:5c:fe:1c:02:a9:42:39:6a:52:38:94:
3d:96:e3:65:e7:0e:cd:1d:08:23:60:9d:2f:cc:fc:09:12:6a:
7d:19:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:55 2025 by rpki-client