Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa
File: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (raw, json)
Hash identifier: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=
Subject key identifier: 34:BF:32:78:64:4B:7F:05:F9:5D:E1:04:30:0A:18:78:B3:FE:06:B4
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 01FE
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa
Signing time: Wed 25 Sep 2024 02:05:48 +0000
ROA not before: Wed 25 Sep 2024 02:05:48 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150129
IP address blocks: 103.154.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8
Validity
Not Before: Sep 25 02:05:48 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66f36ffc-906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:a6:57:1b:df:a9:19:da:4f:1b:3e:a3:87:
fa:b3:61:1c:75:d2:c4:8c:b8:64:81:ed:89:f2:6b:
fa:31:30:51:e6:b7:32:ff:a3:40:23:54:11:a0:d4:
05:61:49:b9:4c:8d:47:3d:96:26:25:77:f7:25:19:
81:0a:67:65:7a:90:22:31:dc:f6:c1:08:e7:4e:57:
45:25:16:72:e6:2a:b5:fb:fd:2a:1c:47:36:21:52:
3f:b6:1b:25:95:79:72:d5:35:0c:3c:6a:67:f8:c1:
7b:87:e4:1c:5a:a8:ac:5e:05:52:2a:7f:9d:07:cf:
78:32:17:c9:73:8e:e8:4c:26:73:1d:3d:7c:ea:94:
a0:34:2b:87:da:84:38:34:dc:d3:e0:17:e6:10:5a:
f2:fd:f7:e3:0f:2a:af:87:a3:92:2e:e1:53:a5:65:
77:10:71:c7:98:f6:5e:bc:22:14:90:65:94:61:ba:
80:6b:22:a8:84:7e:f0:54:66:4a:47:7d:8e:c0:08:
28:aa:cd:14:90:64:00:38:42:e3:53:2b:69:e1:39:
17:1e:6e:65:ac:81:3a:bf:7d:60:e2:17:27:5c:ab:
1c:2c:6d:5b:5e:54:c9:65:cf:8e:9d:a4:12:a9:d2:
5e:9d:c5:62:05:eb:2c:4a:a8:6b:af:8c:f0:34:d0:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:32:78:64:4B:7F:05:F9:5D:E1:04:30:0A:18:78:B3:FE:06:B4
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.64.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0d:5d:52:b3:ed:71:ac:28:a1:9f:ad:cc:4b:1d:bd:73:72:
65:db:1f:87:ec:a1:f0:72:50:82:eb:97:e3:29:ae:e3:66:ea:
aa:d1:1c:96:6e:6a:0a:c7:a1:6d:24:c8:05:3f:8d:78:69:4d:
c4:47:0e:75:35:54:a3:06:0b:a5:05:96:00:22:2c:4a:f6:68:
73:d8:24:8c:0a:8e:e1:71:52:a1:75:d2:2e:f2:23:83:9e:41:
54:4b:3a:8c:91:41:35:35:18:72:bd:4b:0f:7c:be:8a:a0:8d:
8e:a0:81:e7:cb:c9:f2:84:ba:16:fb:cb:43:c7:41:e8:0c:4b:
24:ba:f0:d1:a9:90:4d:cd:b0:92:1e:4e:28:a8:eb:ad:3e:24:
4f:f2:b5:39:a6:51:27:cc:61:69:ce:cd:a2:3f:94:43:9d:10:
52:e8:8c:f5:9d:b7:11:27:44:53:fa:84:36:fe:b2:14:59:d6:
1b:cf:61:f2:7a:e8:42:58:d8:7f:60:8c:d2:85:ea:16:e2:33:
37:13:54:21:18:e5:6f:fc:dd:44:dc:88:96:f5:fe:d5:e9:1f:
c3:18:cd:43:35:35:89:0f:57:c2:03:21:2a:73:9c:62:85:b9:
e5:67:86:dc:dc:d0:5b:e1:55:fe:45:b9:10:4d:ce:b2:c6:86:
db:cd:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:48:05 2025 by rpki-client