Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
File: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (raw, json)
Hash identifier: LsVQKkTp9V5mDiVUJekj0bvUgPf5aQfKDpRqhhkjvWs=
Subject key identifier: 7D:A1:95:1A:49:FE:67:21:9F:40:E2:97:4F:AA:24:62:F7:1C:DD:32
Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial: 076F
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
Signing time: Tue 31 Dec 2024 21:10:14 +0000
ROA not before: Tue 31 Dec 2024 21:10:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136000
IP address blocks: 103.145.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD088
Validity
Not Before: Dec 31 21:10:14 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67745db5-84cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:20:7e:7a:88:30:82:48:66:6c:8b:a3:2d:
e1:4b:39:cf:53:89:75:74:41:22:2f:06:10:6a:7f:
9a:0b:c4:48:a6:a8:7f:54:68:ea:7b:83:81:b4:c6:
a7:30:ec:09:70:29:1d:07:a6:5e:53:00:5d:3f:ee:
f8:c9:cb:9a:bf:89:f7:7e:f3:b8:01:dc:5d:18:81:
90:a4:47:39:71:5e:16:6a:ce:58:f3:7e:02:5d:62:
f8:67:75:9b:0f:dd:27:49:9b:18:3c:cd:e5:1f:4a:
ba:fe:8a:4b:2a:62:2b:42:92:2f:59:0f:58:c2:c2:
37:aa:b1:0b:a4:e4:bf:15:e8:ab:52:4a:47:3e:79:
2d:37:72:d8:86:65:e7:e4:47:89:38:23:a0:c4:69:
4b:9a:52:9a:71:c2:ba:d9:53:52:bc:cf:1c:e6:44:
f3:58:da:3b:2b:33:f6:12:84:02:51:06:fc:02:21:
59:7a:21:41:c9:bc:5e:f9:3f:0d:24:4d:df:5c:bc:
b2:48:aa:33:fc:52:77:70:5a:4f:9b:58:6a:aa:a4:
a4:5e:a4:38:2e:52:58:e7:ca:8c:00:b7:26:40:0d:
a2:8f:06:96:61:cf:60:92:6c:c8:3f:94:9c:87:2f:
6f:ef:f3:27:d9:5b:87:ad:a8:08:77:af:84:df:ab:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:95:1A:49:FE:67:21:9F:40:E2:97:4F:AA:24:62:F7:1C:DD:32
X509v3 Authority Key Identifier:
keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/423EA4CC039B11EBB3C1465CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fd:0f:01:df:db:df:c9:44:60:ee:48:53:9f:c6:5a:c7:31:
82:10:d5:fa:b2:3c:e7:90:1e:82:ad:21:a4:12:c3:aa:60:33:
59:20:46:8a:96:65:c4:43:ac:40:02:8b:8b:7a:0d:69:6a:72:
e1:b9:4f:3e:b2:14:6b:8f:42:03:0f:6b:a4:ac:59:11:cb:2a:
8e:62:27:b3:f7:1d:bf:8a:d2:be:24:fd:21:25:77:df:1e:c1:
c8:c4:5f:92:bc:21:25:90:2e:b6:df:74:64:eb:df:1a:11:d4:
a5:05:49:54:7a:bc:85:d8:34:99:90:b2:1b:b9:53:eb:36:77:
6c:4e:83:11:82:41:64:db:60:f5:05:99:38:c0:6a:2d:3b:da:
9b:a2:cd:b1:75:c4:ff:88:83:da:43:36:0d:23:62:3c:a6:6b:
4c:00:9b:f2:ab:37:d3:bf:12:7d:d5:24:7c:ac:fa:e1:7b:87:
ed:b1:c0:9e:f1:7e:a3:63:80:2e:4a:10:d4:37:b4:33:56:94:
e4:1c:12:5d:88:dc:58:e9:67:82:16:f4:38:94:78:6b:fb:d6:
4e:d3:7b:ed:c2:a2:2e:c2:c9:4a:67:30:45:8b:00:3d:66:38:
12:f0:a7:6c:71:c7:cc:b3:7c:ae:be:86:90:d1:41:91:f7:be:
b2:e1:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:55 2025 by rpki-client