Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/FA4102AA9AFA11EEB4C1E974C4F9AE02.roa
File: FA4102AA9AFA11EEB4C1E974C4F9AE02.roa (raw, json)
Hash identifier: bO9sh+fet71tFCLhKgPQUeHn0mQwhgvViK70jyzmBEs=
Subject key identifier: 5E:42:98:3F:5A:23:92:C1:9F:89:08:1B:5C:9B:4E:FC:4F:06:B2:22
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 07
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/FA4102AA9AFA11EEB4C1E974C4F9AE02.roa
Signing time: Fri 15 Dec 2023 03:35:54 +0000
ROA not before: Fri 15 Dec 2023 03:35:54 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137443
IP address blocks: 103.79.120.0/22 maxlen: 22
103.79.120.0/24 maxlen: 24
103.79.122.0/24 maxlen: 24
202.91.36.0/22 maxlen: 22
202.91.36.0/24 maxlen: 24
202.91.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E
Validity
Not Before: Dec 15 03:35:54 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=657bc99a-eba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:37:8b:98:d1:c1:8e:08:02:62:53:94:72:
c7:da:79:7e:f6:b9:3e:3a:8e:d8:94:b5:f1:c0:75:
46:e8:e4:aa:24:69:6a:ba:6a:29:1c:6b:76:07:3f:
cb:4a:d7:8f:05:75:12:e8:9e:b0:af:a5:96:63:f4:
51:d5:cf:86:80:8b:0d:99:4f:d6:25:f5:80:4b:62:
2b:59:f8:27:e4:1a:82:e8:34:0f:46:6b:9d:a3:e0:
c0:24:5c:77:76:cf:7a:00:35:16:bb:13:c4:49:e6:
dc:55:3f:97:6c:6a:f4:b4:32:e8:38:b3:f3:fd:d5:
71:cc:37:1c:70:0a:9a:f4:d6:0f:29:f3:d5:c3:50:
34:00:2c:9a:77:e3:af:7b:e9:5e:50:30:6c:52:26:
1d:f2:38:58:a8:34:02:12:c3:b9:8c:55:20:7b:2e:
0c:e7:ad:00:c6:03:67:69:d5:cc:86:33:f8:63:04:
64:30:e5:8a:71:03:d9:03:b7:42:c3:3b:b6:fe:28:
10:bd:5b:e0:13:ed:12:6f:02:5e:d6:f7:2f:cb:1e:
be:d3:07:d3:d8:74:6e:34:ca:17:cb:6e:16:4c:5b:
82:36:5c:0f:23:f8:b6:eb:14:e8:fe:9c:64:f8:7f:
25:6f:52:d3:b4:42:3a:11:ce:4d:cb:16:09:47:89:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:42:98:3F:5A:23:92:C1:9F:89:08:1B:5C:9B:4E:FC:4F:06:B2:22
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/FA4102AA9AFA11EEB4C1E974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.120.0/22
202.91.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:de:b7:f4:41:e8:b0:cc:9b:62:35:80:c6:ef:6a:1c:64:b9:
9d:e9:8c:51:84:cb:d8:9c:43:00:56:71:79:8e:ce:f9:35:a2:
fd:ef:e4:74:1d:c3:4c:38:8a:63:84:8f:36:6f:f3:18:f4:ca:
ba:65:a3:14:3d:a9:72:3f:10:fb:ea:54:fd:70:78:20:a9:e6:
70:04:f6:83:2a:a3:2c:22:1a:fe:96:7e:70:f3:da:3b:38:cb:
09:bf:90:71:30:32:6f:5c:37:10:d8:53:db:f5:50:a4:3a:47:
e6:89:64:60:09:08:fd:09:21:32:e9:8d:7a:4e:2e:e5:74:c4:
0f:a1:94:c1:c1:2a:d5:3c:9c:fc:a8:b5:b8:ea:4e:30:64:74:
f9:8a:2b:53:c6:38:23:15:5b:39:81:8c:89:d0:62:94:e2:8e:
de:fb:42:d5:09:d3:1e:ca:da:36:c7:5b:32:31:f6:c4:77:8d:
e1:48:11:79:2f:3c:33:19:7d:62:29:7b:b6:f5:34:60:7e:6f:
8c:30:7c:2a:73:90:ac:b6:24:7a:3d:3a:19:20:1f:d2:d3:3b:
d0:6e:e8:aa:5d:16:a6:e8:26:f2:71:6b:06:89:95:1a:a9:04:
fc:f0:8f:c3:e3:f5:d8:52:c9:11:c0:ca:51:c6:7a:9a:82:28:
51:72:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:41 2025 by rpki-client