Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa
File: 97E05E58B15E11ECB6B31625C4F9AE02.roa (raw, json)
Hash identifier: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=
Subject key identifier: 75:0B:DE:94:AC:FB:17:6F:BB:B2:72:F0:A6:87:39:A6:96:1A:25:83
Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31
Certificate serial: 02C6
Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa
Signing time: Sat 13 Jul 2024 03:24:01 +0000
ROA not before: Sat 13 Jul 2024 03:24:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135391
IP address blocks: 45.255.132.0/24 maxlen: 24
45.255.133.0/24 maxlen: 24
45.255.134.0/24 maxlen: 24
45.255.135.0/24 maxlen: 24
103.65.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46E8
Validity
Not Before: Jul 13 03:24:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6691f351-ccd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:aa:a8:e6:f9:18:2f:6e:53:fe:e1:3c:41:
0c:76:93:9f:5a:d6:f4:63:4d:86:e8:d5:4e:8b:c0:
2c:35:67:62:68:f0:62:86:7c:bd:3d:ea:18:0d:61:
c4:15:23:e0:4a:7b:68:af:3d:cc:0a:00:bc:6c:da:
12:8b:e3:bc:ca:79:06:94:62:f1:66:dd:c6:ca:ab:
cd:94:77:3d:5b:85:cd:ac:f5:b5:aa:4d:33:bb:b8:
1a:76:5f:c9:3f:01:9d:d8:ac:5f:97:7a:5f:49:06:
52:d7:8a:65:ab:d7:f6:88:1e:8d:7f:88:a7:e3:8e:
4c:fd:ea:fc:65:9e:16:ad:5f:6c:25:c6:8c:e8:b6:
12:f1:30:4d:bb:b8:35:b6:9d:50:e4:99:dc:03:ef:
e2:7b:37:81:9a:78:81:03:4a:cf:5e:94:63:b3:99:
aa:42:7b:39:dc:9e:8d:33:d6:48:f7:d9:68:92:65:
0a:46:15:9a:cb:09:ed:da:6b:e1:da:ef:3a:c1:f2:
8c:c6:43:a0:ec:9e:b1:8e:f2:e1:d1:d5:f8:34:36:
59:77:ed:ce:56:32:fa:73:ae:f8:16:ba:fe:65:49:
49:e7:fa:7d:af:bf:ad:89:b0:68:27:64:e4:5f:0e:
17:bf:5c:cf:21:fb:7d:e4:67:d2:68:f1:a5:a9:e5:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:DE:94:AC:FB:17:6F:BB:B2:72:F0:A6:87:39:A6:96:1A:25:83
X509v3 Authority Key Identifier:
keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/97E05E58B15E11ECB6B31625C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.255.132.0/22
103.65.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:dc:d4:f4:07:ae:c6:be:da:9f:8e:30:db:24:43:4b:63:77:
eb:26:a9:96:70:d7:9d:0a:e6:bd:d6:84:bb:05:fb:48:3e:9a:
22:5f:64:d2:65:85:54:f2:aa:33:bc:8e:ba:88:ee:44:7f:45:
cd:28:d0:07:d6:24:95:e1:f1:c4:ec:dd:fb:a2:38:65:d3:31:
27:47:5e:3d:f4:6d:82:b4:3f:e5:97:04:0a:fa:df:45:4d:45:
90:34:82:5e:67:3f:ad:a0:52:31:c3:3f:05:b5:bb:f7:e6:a2:
88:14:92:07:c1:81:71:c6:3a:f3:b1:61:0f:15:f1:cb:d9:ea:
22:bc:24:d7:ce:8a:b4:90:d9:fc:09:ad:97:ac:bb:c1:2a:1e:
89:1c:de:e4:bc:fd:0f:86:e0:4b:5c:d9:fc:63:58:3a:0a:5d:
74:45:75:c8:0b:7a:7c:ee:5b:a0:70:fd:bb:a0:14:15:35:44:
16:7f:69:ce:cf:40:15:af:ad:b9:a3:4b:8b:3a:85:e6:7f:9e:
c3:85:5c:6e:11:a0:a6:3e:08:b1:52:bc:f9:44:84:09:a5:b0:
68:3f:07:87:c3:1d:cc:ee:fe:f7:2c:1a:d9:9a:c8:9c:02:3b:
47:01:57:fd:93:4a:6f:23:1c:85:09:9c:ae:2c:40:d1:6a:d8:
1d:da:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:17 2025 by rpki-client