Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
File: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (raw, json)
Hash identifier: lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=
Subject key identifier: 82:D5:24:F7:8D:E4:D2:A5:42:8F:AA:9D:20:92:A0:8E:81:1D:BF:64
Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial: 08BD
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
Signing time: Thu 18 Jul 2024 21:19:00 +0000
ROA not before: Thu 18 Jul 2024 21:19:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 58629
IP address blocks: 103.138.122.0/24 maxlen: 24
103.138.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28C1
Validity
Not Before: Jul 18 21:19:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=669986c4-e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:56:e1:4e:86:b5:e9:30:8a:12:d9:eb:f8:
88:d1:11:33:6c:f2:14:94:f4:c5:cc:b1:0e:73:2b:
4e:1b:8f:43:fa:c5:d4:8a:e9:e8:60:0d:f9:25:c2:
fc:53:a4:05:f1:c7:47:93:0b:06:d0:01:ed:fa:39:
bd:3e:bc:db:5a:f2:66:1b:1e:51:aa:81:ad:3c:ef:
fc:5c:8c:4a:1c:a6:13:5b:09:46:86:06:e2:85:ee:
d4:b0:13:6b:53:1c:5c:bb:fc:6d:e8:95:06:f6:bc:
67:c8:97:8e:91:e0:f3:65:65:f4:09:c1:2a:31:28:
5b:3d:2b:58:03:16:a3:b7:1b:48:62:1d:c0:3e:5d:
8c:11:0d:83:6e:4e:a5:42:70:1f:02:72:0a:2b:9d:
08:80:66:9a:f7:32:c9:34:42:71:34:db:82:23:62:
72:58:0d:cd:05:03:26:ac:67:64:b2:a9:66:59:71:
d3:af:9f:2f:bb:27:39:1f:28:8b:0e:95:63:bc:87:
6a:5f:c5:30:f9:dd:32:a3:07:35:c0:c1:17:2f:3b:
f4:71:ef:d3:2b:66:82:a4:2e:63:ad:67:d5:aa:d8:
65:df:96:b8:fc:06:87:f7:52:11:05:2c:0a:6f:d8:
b9:71:21:39:ad:1b:5a:70:87:8d:87:80:ee:31:1f:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:24:F7:8D:E4:D2:A5:42:8F:AA:9D:20:92:A0:8E:81:1D:BF:64
X509v3 Authority Key Identifier:
keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/91FD24BA23C511EDA6D7F073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.122.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:fc:58:a6:84:9c:de:2c:60:8e:64:1c:06:73:4e:85:cf:24:
e5:1d:dc:06:90:f2:99:91:a8:3f:42:96:35:70:f5:87:8f:dd:
74:a3:fc:cc:9b:66:4a:43:31:9d:72:f5:65:e0:56:b6:af:8d:
4b:75:19:e7:56:ae:b9:5a:7e:d4:d4:2c:88:95:c4:8c:2f:72:
82:0f:de:2f:09:fe:4c:2b:86:2c:3e:29:2c:b6:a0:64:b9:9c:
a0:8a:cd:69:d2:05:08:99:63:ea:8c:d2:67:9a:38:d6:7d:b4:
7e:2f:6d:ad:f1:97:dd:ea:76:76:46:7a:df:ec:d6:91:b3:c1:
46:c2:ac:a2:1e:58:37:3e:15:58:a1:4f:04:ad:9a:42:ac:2f:
21:d0:ab:95:af:ef:94:59:bc:de:54:14:79:ad:e9:5e:7e:de:
61:2f:c0:a6:33:18:a4:a3:37:b5:c3:bb:81:49:ac:cd:09:bb:
cc:43:31:cc:44:32:76:b7:e7:75:df:06:41:0a:3c:aa:42:24:
bb:41:4b:4b:12:74:cc:79:78:db:7e:a6:f5:87:b4:a5:6e:e4:
e0:4b:b0:db:12:05:c7:e4:1e:d2:07:49:df:c8:85:56:7a:2c:
70:9a:68:a9:cb:31:3a:50:f5:1f:e4:f3:7d:8f:d5:85:ab:3e:
1b:54:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:51:06 2025 by rpki-client