Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
File: 65051AB6BF3C11EAAF328582C4F9AE02.roa (raw, json)
Hash identifier: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=
Subject key identifier: 44:E6:5D:95:99:5E:E6:59:2D:CF:CA:03:71:7A:8B:03:84:45:41:B3
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 084F
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
Signing time: Sat 04 Jan 2025 20:29:19 +0000
ROA not before: Sat 04 Jan 2025 20:29:19 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 10021
IP address blocks: 103.23.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56
Validity
Not Before: Jan 4 20:29:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67799a1e-35c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:7d:f7:4d:18:40:c0:49:3a:ec:a4:f0:89:
b3:45:78:7a:44:ba:30:31:92:be:4a:72:01:ad:3b:
b9:b2:5d:ac:95:17:f8:2f:ad:f2:a0:60:82:e3:0a:
95:b2:76:6a:d5:4e:36:c3:d2:c7:a2:72:1d:6f:ae:
f9:9f:6a:2e:f5:97:ea:53:42:c2:24:72:a6:ab:07:
a2:04:c8:13:a9:71:da:99:05:d2:85:4b:a0:fb:c1:
fe:34:c2:fa:e5:c7:49:3a:02:d7:38:8d:03:b3:a6:
9b:83:65:67:bc:82:6e:26:7a:0d:2d:2c:42:2d:5c:
d5:4d:b5:87:43:f1:c5:c0:ee:54:86:3b:52:40:1a:
ef:c0:1f:a3:10:4b:7b:37:a4:e6:39:75:76:cd:b6:
ac:f2:d8:b3:c9:e4:90:58:af:56:78:36:5e:37:b5:
01:d2:a0:21:c2:12:df:66:96:dc:ce:c2:a3:00:6e:
c5:b0:8d:63:ab:2f:26:04:89:82:59:3a:7a:86:82:
88:4d:42:7f:26:3a:0d:82:21:8f:e6:df:97:09:73:
07:92:e2:10:f0:f6:28:56:31:b2:b3:8d:12:9e:43:
bd:90:c7:6a:33:f9:ee:c9:52:d1:90:de:e1:0f:cc:
3b:64:8d:a7:37:6b:9f:00:36:57:58:5e:e5:06:65:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:5D:95:99:5E:E6:59:2D:CF:CA:03:71:7A:8B:03:84:45:41:B3
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65051AB6BF3C11EAAF328582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5a:8b:89:f3:3f:d2:df:9f:e6:c1:29:df:d7:a7:ba:da:00:
75:16:ea:5e:90:10:3d:7a:d5:34:65:c6:94:16:54:5e:13:bb:
54:ab:a8:ca:fc:c4:4d:31:aa:55:18:db:15:df:8a:b6:76:54:
d7:f2:bc:1e:44:70:88:af:9d:a2:d7:dd:8d:ad:40:72:47:95:
4c:db:4c:3e:0f:d8:43:38:9d:c0:1a:f3:4a:f3:34:2a:74:bd:
1c:a4:b7:5a:27:82:ca:22:2f:07:ea:d5:72:5b:c3:5c:19:5e:
13:1f:31:77:65:da:bc:a8:a8:e1:6e:d4:0d:84:31:29:1e:9a:
22:9b:ce:87:0c:71:eb:12:6c:13:64:17:d6:88:84:93:cb:54:
43:1b:e0:56:79:93:18:dc:0a:ba:d7:8f:56:34:52:7e:5a:47:
9e:59:1a:d0:e1:02:33:d2:03:30:cd:d4:dd:20:64:0e:b7:87:
09:8f:25:ed:d9:0d:59:bb:f5:9c:51:e5:ab:80:64:4f:d9:45:
f2:fe:aa:f9:7f:b1:b1:b7:33:9c:fb:5d:12:38:d3:4b:4f:44:
05:66:ad:a8:72:5c:af:b3:43:1b:15:7b:d8:5b:2c:99:13:a7:
46:52:1d:bb:0e:0c:e4:b1:e1:dd:49:7b:a1:e8:a6:9f:72:b2:
35:28:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:03 2025 by rpki-client