Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa
File: 36C627945ADD11EF80893A3FC4F9AE02.roa (raw, json)
Hash identifier: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=
Subject key identifier: 28:A2:63:24:B8:87:F2:BF:7A:D3:63:28:1D:A2:E4:CF:38:7F:7F:E2
Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial: 3B
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:49:38 +0000
ROA not before: Fri 29 Nov 2024 05:49:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.197.168.0/22 maxlen: 22
220.158.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EBA
Validity
Not Before: Nov 29 05:49:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674955f1-c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:f2:33:39:36:c4:3a:22:7e:9d:e8:d4:2f:
d8:64:cd:8a:56:20:b9:0e:d5:0e:34:ea:47:67:77:
59:d8:5b:28:3d:23:80:1b:29:a7:a8:f2:1a:eb:84:
ad:9f:60:96:1e:1e:db:f9:a0:71:62:2c:8c:5d:bd:
78:a6:2b:9f:e1:6b:f2:e3:d2:21:ec:32:da:05:d5:
06:d2:72:88:9a:c2:1d:42:9f:e7:ec:43:84:04:eb:
b0:92:20:1a:c8:30:81:de:35:e7:f2:83:5c:2c:26:
16:3a:33:94:fa:59:9f:8a:25:fd:cd:42:0e:ee:47:
3f:d3:fb:4b:4b:5b:b8:ce:81:7f:92:23:b7:3c:9a:
8e:e0:78:a3:7f:21:c1:6a:80:1b:a1:44:10:66:d4:
f2:2c:c7:aa:fe:04:5b:b1:8b:38:ca:4f:ac:12:e5:
70:fa:eb:3d:8a:19:5e:02:05:25:ff:38:03:5b:d2:
3a:85:c4:af:2e:e5:18:88:4a:67:b3:d8:4e:00:1c:
45:5b:37:47:e8:10:31:f0:a7:d0:49:11:18:eb:ff:
ab:57:ce:97:4a:50:1b:f8:14:e7:ba:73:40:ba:32:
46:ff:57:ae:76:5f:9a:cb:0d:4c:3b:e6:f1:d1:98:
e3:65:dd:08:c8:2e:15:9d:ed:19:7d:93:ef:18:2b:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:63:24:B8:87:F2:BF:7A:D3:63:28:1D:A2:E4:CF:38:7F:7F:E2
X509v3 Authority Key Identifier:
keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/36C627945ADD11EF80893A3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.168.0/22
220.158.224.0/22
Signature Algorithm: sha256WithRSAEncryption
70:2c:40:76:cf:1a:03:04:7f:19:f4:29:4d:43:bf:3d:be:a1:
5b:b5:72:4d:7b:e7:cf:e5:c0:82:3d:58:62:02:1b:00:4b:a9:
e6:76:58:b2:ee:56:1c:cf:14:3b:45:2c:b4:12:4d:21:1e:b3:
0c:18:1c:a3:03:10:48:fc:84:7d:de:da:a6:e9:c7:2f:04:c8:
b2:a5:b3:a0:87:ad:2b:10:4b:a9:c0:d1:af:40:ef:a3:51:95:
1d:43:b4:a5:03:51:a2:6f:49:1f:b8:27:2c:93:4d:2d:f4:d2:
87:6e:4f:32:b6:91:54:d1:4b:1d:64:eb:3a:62:92:e0:86:2a:
e0:b3:57:b7:33:22:83:b1:ab:a5:83:7c:55:03:57:99:63:a2:
c4:0b:00:85:fc:1c:fd:72:a8:d3:3b:c3:d9:e7:6e:7d:3e:d9:
ca:27:f7:79:1a:9c:10:9b:ab:9f:30:ee:a7:b6:39:81:b0:fb:
47:96:a5:c0:8b:75:d9:b9:04:e3:79:6e:4b:b4:6e:19:24:e5:
2f:d5:69:e2:0c:77:88:d1:60:d4:18:24:73:88:92:7b:af:86:
22:8b:90:5d:d4:82:d2:65:74:f5:ea:ab:7c:86:b8:60:a1:69:
ba:50:d4:1f:df:6d:29:3f:a2:88:ff:f0:62:d3:62:00:e3:fe:
60:47:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:49 2025 by rpki-client