Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa
File: F87DE4E2518011E98D519C48C4F9AE02.roa (raw, json)
Hash identifier: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=
Subject key identifier: AF:3B:BE:DA:7A:45:3D:C8:17:FB:F9:4D:D6:B4:CC:74:85:10:97:0D
Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13
Certificate serial: 11E3
Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:35:19 +0000
ROA not before: Thu 28 Nov 2024 17:35:19 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 10780
IP address blocks: 103.11.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E65
Validity
Not Before: Nov 28 17:35:19 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748a9d6-9be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:38:53:12:b9:eb:6a:1e:39:a5:e6:a4:70:
e0:ac:ad:38:e3:04:6e:46:fc:12:67:af:90:7e:95:
a7:66:96:bc:a4:b9:2b:ed:0d:dd:18:ad:92:65:fb:
44:e7:27:fc:d5:b8:8d:ca:e9:f9:df:c7:55:06:4b:
18:cb:d1:18:99:59:78:56:a0:83:ad:66:ff:00:81:
cb:1d:7c:0c:6b:e4:fb:bb:f1:53:28:c1:77:ec:8d:
85:40:ca:02:29:5e:ca:62:1c:d8:be:a1:1d:3e:6e:
cf:3e:b7:46:de:43:ca:da:b7:87:93:fa:fd:97:bf:
33:49:2f:b6:14:a5:1e:ff:3c:f4:3f:07:bc:f7:43:
11:f4:b7:c8:d8:b4:80:2d:d9:02:0a:e4:a0:18:19:
b7:4e:3a:f1:2b:df:92:14:e7:1d:f5:8c:ee:b7:38:
b4:ee:47:09:a6:de:72:b0:45:01:1b:bd:f2:23:3f:
bf:2b:aa:1d:c1:2c:52:7b:6f:9f:ef:6c:9f:a6:11:
48:b7:6c:3b:94:48:5d:60:94:e1:af:e6:4a:96:2f:
4f:0e:a2:ec:87:89:31:d0:69:ee:f2:a8:f4:da:8e:
3c:8a:11:e3:98:88:64:80:27:5a:26:b5:0a:fe:b8:
1e:c3:47:6f:12:39:93:04:c5:1d:03:33:97:23:cb:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:BE:DA:7A:45:3D:C8:17:FB:F9:4D:D6:B4:CC:74:85:10:97:0D
X509v3 Authority Key Identifier:
keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/F87DE4E2518011E98D519C48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6d:e4:65:f1:26:84:9f:c7:16:78:f9:af:01:08:b8:af:15:
d9:44:b4:e0:3a:b0:86:fc:ed:14:ab:1a:1f:16:3d:b8:5c:d2:
6e:88:b9:01:cd:90:20:d3:f8:98:55:1f:6c:b5:7f:15:1d:7e:
d7:19:15:8e:e9:75:67:b8:f7:d6:27:41:5b:74:a5:bc:c7:d2:
e4:4d:ae:72:50:4e:1e:42:6a:cc:c5:03:17:77:51:1e:ab:8a:
de:ef:6c:92:3a:72:8e:6d:65:ac:d4:4e:fc:c0:eb:0a:1d:a0:
be:bb:be:85:2a:d2:0d:b7:0f:ee:4d:2d:76:02:58:a8:48:30:
e7:c8:15:9b:f4:38:70:49:ef:b1:98:5c:55:6b:ac:66:6b:f6:
0c:79:54:e2:8f:38:ad:3a:42:92:dc:2c:ac:ba:1f:11:2d:2c:
a5:a1:d6:4c:37:ee:74:68:34:41:ae:52:9a:a8:9c:ea:09:7e:
c5:49:db:90:e1:67:7d:47:08:b2:20:0c:b7:53:d3:91:6f:2b:
47:40:d1:a9:c1:ce:22:16:2a:36:ed:af:3b:9e:40:78:44:90:
4b:19:7e:09:d5:b0:59:56:63:45:73:50:c4:e7:15:94:ba:49:
92:ff:5d:9a:fc:0a:67:21:60:87:06:30:b7:ab:1e:f3:8e:62:
1b:34:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:15 2025 by rpki-client