Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1DE1EBA25F0E11EF88D4A280C4F9AE02.roa
File: 1DE1EBA25F0E11EF88D4A280C4F9AE02.roa (raw, json)
Hash identifier: CHZ8BUCP+ogBpGKfLieugzwCJ7wbfBVhmhSN5UggfIs=
Subject key identifier: E3:E6:09:FD:F9:EA:82:64:B3:9B:1E:58:F1:9A:67:D9:B5:00:BD:BB
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 219F
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1DE1EBA25F0E11EF88D4A280C4F9AE02.roa
Signing time: Fri 06 Dec 2024 16:03:34 +0000
ROA not before: Fri 06 Dec 2024 16:03:34 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151704
IP address blocks: 103.111.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8607 (0x219f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845
Validity
Not Before: Dec 6 16:03:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67532056-6aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:13:c0:b2:f4:4c:e0:8c:30:fb:b1:62:48:
8c:5c:23:72:f3:2e:9f:9b:34:30:6c:6c:fb:89:91:
77:d3:c0:3c:44:07:91:12:96:14:51:e7:4e:4f:48:
bf:c0:69:bd:74:f1:d2:a2:69:ec:6b:ed:c3:13:02:
64:b0:26:4f:df:3f:7e:42:ac:c7:2d:9a:2e:84:63:
7c:c2:f4:ab:8c:6b:c8:71:f7:4b:b9:72:bc:b0:fd:
da:ec:02:4b:27:0c:f4:10:8a:04:d1:1b:23:34:52:
a8:ae:14:03:67:f9:6e:af:55:24:a5:a3:9b:94:ba:
57:24:7d:a4:76:8d:2c:2d:3b:fb:76:bc:1f:89:68:
91:9c:b5:59:ac:3a:61:6a:5e:73:83:24:fb:ae:4c:
4e:c2:d3:a9:07:40:cd:00:c5:51:b1:cb:78:e1:86:
ab:bb:57:f7:f5:d4:75:ff:44:f7:21:90:60:29:8e:
f1:d5:7a:aa:28:e9:5c:6c:b5:92:a7:b0:a1:7e:bc:
bb:bb:96:5e:84:05:de:13:01:e7:c2:65:06:c7:b2:
08:46:e3:14:38:6e:b5:03:b9:50:e0:de:79:32:db:
9f:e3:f9:08:6a:f3:a6:b9:54:10:03:1c:27:40:19:
4b:3a:6d:de:a3:02:28:fe:b7:56:76:ad:8f:2c:b5:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:09:FD:F9:EA:82:64:B3:9B:1E:58:F1:9A:67:D9:B5:00:BD:BB
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/1DE1EBA25F0E11EF88D4A280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.88.0/24
Signature Algorithm: sha256WithRSAEncryption
57:42:c9:c0:0a:d2:d6:43:d3:4b:30:24:c8:e9:44:22:3d:3e:
d8:16:33:0f:06:17:0a:59:69:a7:4f:5f:a3:27:85:c1:86:a7:
f6:8c:47:9a:d0:b8:db:bf:b6:f2:a9:98:68:4d:3b:55:a9:8b:
92:cb:10:5e:2b:cf:05:8f:48:1d:eb:30:ee:53:d4:da:fc:b0:
bc:b2:59:a5:08:ab:23:2e:ab:2f:a7:03:ba:04:64:26:70:38:
d4:89:6b:19:15:d0:c3:68:09:25:77:83:5e:0c:76:de:ee:ff:
e7:96:1e:c6:54:35:00:0d:a0:4f:3b:d2:bf:f5:df:6e:21:7f:
3b:07:1c:1b:8f:bf:49:b7:57:d0:b0:ad:f4:1f:d9:00:5e:f1:
bd:50:68:76:b4:f5:ea:9b:f7:90:8c:3e:f6:40:94:94:c2:db:
c1:5f:a1:bb:7f:6e:f0:09:7c:39:18:2d:3d:b6:65:75:4f:26:
5c:7c:24:05:f7:bf:76:b8:20:58:73:f4:37:c2:85:f6:f0:73:
f8:af:10:33:60:c4:8d:c8:c8:af:29:a4:6d:08:fe:d4:02:94:
13:cc:cf:cf:d6:d9:ce:e4:2d:76:4e:95:08:de:cc:98:57:5d:
37:96:a6:48:89:ef:ad:5c:6f:c1:52:d3:3d:b8:5f:ed:36:ec:
0f:df:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:29:27 2025 by rpki-client