Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
File: 636BEC0EDE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier: /h8J/popASB/enq7ZCbERS1Oj0/TN/HVqhlVaGun2i4=
Subject key identifier: 8D:9C:15:84:F6:8E:FA:74:91:56:E9:C0:4E:DD:4A:48:B2:86:B6:3C
Certificate issuer: /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial: 055B
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
Signing time: Wed 03 Apr 2024 01:03:58 +0000
ROA not before: Wed 03 Apr 2024 01:03:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48024
IP address blocks: 103.90.136.0/22 maxlen: 24
202.8.104.0/22 maxlen: 24
2403:4f40::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1371 (0x55b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F185F
Validity
Not Before: Apr 3 01:03:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660caafe-88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:f5:81:06:e3:09:aa:96:a5:5b:0b:99:fd:
67:c3:c5:1f:2f:40:11:9d:92:95:3f:7b:2e:a8:e0:
5d:c8:0f:89:ef:68:d1:b5:bf:81:13:f1:e4:ae:d9:
20:67:ee:2e:9f:bc:46:41:b9:20:58:de:ec:3c:10:
bf:df:0f:db:b4:98:8f:28:42:c9:12:d4:bc:d8:66:
d5:d6:7f:25:b4:7a:13:b5:94:08:d6:c5:6a:a3:4c:
0c:e4:0b:0a:e7:06:63:d6:aa:3b:88:8a:64:0d:15:
b5:16:dc:9f:d1:4b:e5:df:b2:35:54:dd:54:cf:a7:
da:b4:da:28:c1:73:18:d7:29:5d:74:7d:e2:57:17:
9c:13:f3:36:75:fc:9a:17:3f:4e:99:bc:43:2a:8c:
43:60:bf:40:52:07:4c:a9:ed:b2:59:69:f0:55:37:
a2:e8:c3:cb:d1:4e:a4:9a:25:15:f9:82:6c:28:a0:
a4:e0:a6:3a:d8:5d:28:1b:d4:11:6c:42:df:64:d9:
cc:58:25:24:8d:f0:08:83:f3:c7:d7:69:c2:28:f8:
47:cc:6a:31:c3:e4:c8:14:a7:bf:26:93:14:95:e1:
26:1e:7a:5f:c7:55:2d:a5:16:e7:72:ab:d5:e3:63:
a8:80:6f:36:da:b6:0b:de:2c:46:f8:04:1e:43:9a:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:15:84:F6:8E:FA:74:91:56:E9:C0:4E:DD:4A:48:B2:86:B6:3C
X509v3 Authority Key Identifier:
keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/636BEC0EDE2911EB9B09A334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.136.0/22
202.8.104.0/22
IPv6:
2403:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
ad:1c:1c:eb:07:81:1f:1a:4c:77:8e:39:94:01:b9:d1:10:27:
6a:8a:f8:bd:7c:82:93:35:32:28:ce:dc:a3:99:0b:2b:82:0a:
a5:25:cb:6e:30:1b:89:11:a1:68:02:97:a5:53:5a:41:ac:30:
6d:29:79:9d:99:60:11:3e:0f:97:3c:4f:1c:94:55:bd:a8:dc:
22:94:65:92:28:c2:17:b4:56:09:e1:d7:c6:ba:e5:c0:d5:6d:
be:4b:f2:44:55:3e:d3:5a:c9:ee:e7:cd:96:a5:81:60:ba:59:
52:10:d4:19:a9:54:be:19:5a:4d:fb:91:8d:d4:36:36:e4:c5:
e5:84:d3:ad:8b:29:dc:14:76:b5:b9:41:50:5c:eb:42:fd:19:
da:dc:be:a4:d9:c7:d8:f8:fd:1a:85:55:0d:07:45:28:fd:90:
2f:18:45:2f:01:ad:07:32:1c:36:ec:64:dc:5f:86:a9:c2:03:
7a:55:8b:6f:d7:64:f5:74:79:0d:43:2b:fe:66:65:90:fd:26:
94:4c:1a:7c:3c:cf:c0:85:ce:fe:a6:6f:cc:e8:d8:5b:d2:8c:
43:6d:78:c2:30:2e:e3:0b:5a:53:c9:37:f5:ba:aa:c1:3a:2b:
d8:ab:e7:07:eb:39:30:81:f0:3b:2b:48:bd:7b:c5:05:8d:4b:
d5:ff:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:13:50 2025 by rpki-client