Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
File: 387C18C819B811EC841B010DC4F9AE02.roa (raw, json)
Hash identifier: SSxUlFmRZnQyfdZc684KEqFg9kqLpMFaUqQd4F+Mxrs=
Subject key identifier: 36:ED:92:EB:7E:B4:AD:42:71:5F:32:11:0C:E8:90:FC:BF:08:48:E3
Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial: 048C
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
Signing time: Thu 14 Nov 2024 00:25:51 +0000
ROA not before: Thu 14 Nov 2024 00:25:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 17472
IP address blocks: 103.154.68.0/23 maxlen: 24
202.49.96.0/22 maxlen: 22
202.49.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED931
Validity
Not Before: Nov 14 00:25:51 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6735438f-9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:64:91:70:ac:76:8b:e7:59:a0:5f:81:dd:
de:31:f4:34:c0:e4:87:94:92:6e:a5:42:7e:cd:0b:
bb:37:52:64:7e:7c:78:0b:47:bf:58:38:32:4b:4c:
4b:ec:f7:09:57:2f:ba:df:61:df:a8:9c:bc:25:2c:
ca:c0:c9:ee:c2:33:9f:63:e3:69:c3:c7:42:3f:9f:
e1:b7:4d:68:2b:74:1e:8e:8e:7e:1d:ad:df:58:22:
4b:f4:22:51:f5:1a:aa:40:30:92:9a:d9:1d:7b:68:
1b:81:6d:af:17:73:10:6b:5f:91:86:df:c6:00:14:
dd:65:df:51:77:56:a5:d5:89:23:d3:ab:97:93:3e:
94:01:7d:d0:9f:67:b5:ef:83:1e:a5:0c:cf:e8:63:
fe:24:2c:e3:5b:1b:41:d3:a5:e9:93:f3:57:ec:87:
ea:ba:82:bc:f6:c6:be:59:dc:c5:b2:f6:65:8a:e9:
f5:53:5b:90:ae:d1:cb:b9:9c:4f:a7:5b:19:65:7e:
b3:bb:1a:50:e4:be:d4:9d:6e:9d:82:32:71:70:a3:
8b:ee:c6:2d:e1:67:d7:aa:16:72:63:d6:11:e5:05:
8f:86:fc:c7:c0:14:d8:7d:9a:b1:20:aa:29:99:21:
0b:18:88:0c:13:83:f7:7c:b2:18:d8:ff:af:cc:9e:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:92:EB:7E:B4:AD:42:71:5F:32:11:0C:E8:90:FC:BF:08:48:E3
X509v3 Authority Key Identifier:
keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/387C18C819B811EC841B010DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.68.0/23
202.49.96.0/21
Signature Algorithm: sha256WithRSAEncryption
91:5a:ce:bd:7d:cc:14:62:9b:60:9b:ae:1e:a1:8d:09:f7:ea:
bb:16:eb:9f:6b:4d:f1:ec:41:68:f2:85:6f:26:65:23:46:e7:
e9:05:34:36:71:49:58:48:4d:2a:e3:8f:9b:5c:a5:a3:94:0f:
3b:88:16:07:c1:d0:fb:29:7c:df:d4:06:2e:38:53:63:d3:d3:
9c:1d:09:25:ac:49:b5:95:b2:a6:56:3d:0f:fd:94:4f:13:8e:
e2:6c:a3:64:74:a9:69:1d:2d:98:c6:1c:26:a4:a9:87:8f:f4:
ca:f7:c7:ed:7e:f0:e9:b7:e1:98:31:0b:46:f4:14:27:9f:df:
09:b7:76:f6:21:cd:09:79:fa:f9:94:4d:2b:aa:da:29:e9:69:
7e:bb:ee:03:94:91:b3:2f:e9:ce:77:04:7a:cd:e0:c0:4c:de:
38:46:85:7f:2f:ab:b6:90:78:70:05:9a:a4:21:2b:b6:a1:c6:
6b:4e:a7:2a:c0:90:ce:f1:43:97:d9:5c:2d:89:d7:f5:a5:0f:
f0:33:3e:c1:e9:7f:c0:f3:cb:09:cd:43:5c:92:2d:f4:d9:0f:
82:f8:4c:e8:19:52:e6:72:26:9f:28:ae:f5:70:1a:aa:76:6f:
af:37:4a:12:5d:ab:d4:f3:d1:6a:65:6a:60:a3:4d:77:f2:4b:
24:65:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:14:56 2025 by rpki-client