Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
File: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (raw, json)
Hash identifier: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=
Subject key identifier: CB:3D:A8:29:CB:AA:7D:92:37:0A:CD:B1:3A:10:23:87:3A:C8:54:26
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 0163
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
Signing time: Thu 05 Dec 2024 02:46:40 +0000
ROA not before: Thu 05 Dec 2024 02:46:40 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 147303
IP address blocks: 103.29.180.0/24 maxlen: 24
103.29.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246
Validity
Not Before: Dec 5 02:46:40 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67511410-e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:fa:ae:8a:19:ba:2b:af:37:6f:0b:8c:e4:
53:ae:bd:d0:4f:b5:74:6d:cd:fc:38:52:53:ea:29:
5e:3f:d2:09:b2:de:40:1b:55:39:23:c5:a1:96:c6:
11:fe:96:34:2d:42:9e:db:3c:ad:e1:82:eb:4c:c5:
e7:7a:14:73:d7:ab:b7:26:37:11:ac:43:6a:37:89:
77:71:fe:1a:74:c9:ca:f2:0e:20:6e:a9:91:ee:a1:
1e:bf:30:cf:56:b5:81:48:a9:90:03:c3:e5:c4:17:
e5:6f:2e:32:5a:8b:70:bc:bb:3e:e7:a7:ff:e5:00:
b1:f1:04:b3:e9:2e:f6:92:25:3f:a6:98:f0:4f:5e:
ae:a2:49:f2:8c:df:ba:d7:d3:13:a7:cf:71:23:6a:
20:b7:3a:ce:0c:0f:17:3e:d3:83:5e:08:a8:74:85:
f1:aa:c4:40:a2:b9:a1:73:d0:f7:d5:eb:8d:2e:ce:
e0:c2:60:e6:67:ba:e2:4d:b8:1d:36:7e:0e:9f:9a:
92:f1:5c:ef:fd:81:ff:b3:36:46:b5:56:3c:79:34:
62:d0:38:b2:ef:a2:09:4e:8a:f3:79:30:19:83:f5:
3e:c7:d3:87:30:0b:8c:b6:15:04:98:31:31:33:88:
79:91:30:d3:c2:fa:2c:f0:03:16:6c:ce:98:e3:e0:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:A8:29:CB:AA:7D:92:37:0A:CD:B1:3A:10:23:87:3A:C8:54:26
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/87EEC61CCB4111ED8A4D796BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.180.0/23
Signature Algorithm: sha256WithRSAEncryption
05:57:b4:bc:40:69:56:0c:54:33:99:c6:1c:1f:90:bd:c3:09:
44:fe:d9:78:f2:60:e7:63:08:37:30:17:81:6c:92:a0:fc:b0:
c3:07:8f:35:c1:98:21:46:37:d1:0f:24:f8:71:82:69:ec:22:
ea:83:89:8a:12:a3:08:15:75:ef:91:16:b9:95:18:00:64:d7:
fb:6a:d2:a2:0d:5b:1f:03:62:8b:38:a7:a1:fc:fb:b2:d7:c1:
8a:21:2c:ff:9b:e8:0b:ab:25:40:64:d6:01:49:5b:35:f6:26:
25:3e:ea:99:3c:47:d8:ec:22:8f:ff:9f:df:bf:08:f0:66:4e:
c0:85:23:ec:a2:f6:e8:25:90:68:66:2d:c4:1e:bb:56:13:00:
5b:99:fb:74:ba:c9:c5:0d:ad:f7:86:20:e7:9d:04:b6:6c:ee:
26:54:de:63:fb:e9:6a:3a:5c:09:e1:74:3b:0e:10:dc:76:44:
f6:0e:1b:3a:ec:df:06:e2:06:7c:ce:62:bd:7f:99:89:0a:4a:
2f:4e:1a:b9:91:a2:5b:d2:53:8e:d4:17:f6:ae:5d:73:c4:dd:
d9:82:6a:d5:03:8c:9c:9a:09:c2:02:26:d1:c7:04:a1:bb:e7:
b0:fc:b8:e0:31:5e:b8:05:4b:6d:90:eb:20:0d:20:ca:45:6a:
9d:ab:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:57 2025 by rpki-client