Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa
File: 27DC7846B78511EFACBD807DC4F9AE02.roa (raw, json)
Hash identifier: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=
Subject key identifier: 4F:5B:6A:91:B8:B6:21:DC:88:BE:2B:14:BA:E6:7A:6E:8F:F1:6C:E2
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 02D9
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa
Signing time: Wed 11 Dec 2024 06:00:00 +0000
ROA not before: Wed 11 Dec 2024 06:00:00 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137283
IP address blocks: 103.97.176.0/22 maxlen: 24
103.242.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579
Validity
Not Before: Dec 11 06:00:00 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67592a60-ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:a6:08:1f:7b:99:d6:13:d7:64:77:b0:52:
84:f0:74:06:12:8c:74:a4:10:9e:63:a0:a7:c2:9b:
89:77:49:39:8f:c1:a2:81:78:fd:84:f9:4f:8b:53:
82:ff:b3:0b:ab:14:d8:15:e8:2d:ea:05:be:c6:ff:
03:d1:90:1f:22:61:5e:30:9c:74:ba:52:6b:b6:ce:
98:c6:d8:9d:93:c5:b0:81:d9:24:58:8e:a9:86:e3:
1e:42:a2:ed:1b:53:d1:72:2d:34:5f:68:66:2d:87:
9f:2b:e2:68:e7:fd:6e:3a:dd:46:35:39:3e:bc:32:
17:1e:93:98:20:de:3f:d8:f8:84:d9:6f:56:39:12:
3c:be:bb:2e:bd:fe:b5:05:85:4c:2b:eb:9c:f5:ed:
5c:13:8d:9e:35:e2:20:e8:30:90:ef:0b:63:0e:4a:
4f:1a:0a:1d:42:46:ef:cd:21:54:2c:b6:a8:02:57:
4d:a7:4d:65:09:96:fd:76:99:1f:5e:5d:36:9e:77:
1f:21:fc:66:4e:f4:eb:c8:fb:dd:1e:b4:ab:d1:d5:
c5:31:71:86:dd:16:fe:ce:e4:7e:3a:89:14:10:6a:
0d:e6:2e:4f:df:5d:02:16:99:db:f4:38:b5:41:18:
2c:01:e6:85:61:0c:48:63:15:55:97:f8:4b:41:35:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:6A:91:B8:B6:21:DC:88:BE:2B:14:BA:E6:7A:6E:8F:F1:6C:E2
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/27DC7846B78511EFACBD807DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.242.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:b3:ef:a8:4f:f0:2d:7c:f8:8f:ff:59:a2:5c:41:92:a0:25:
4a:8d:d6:68:9f:93:d5:9f:a0:ee:15:d1:13:9b:a0:f5:c1:a1:
e8:8d:49:d1:4b:a9:c4:e6:46:aa:8e:0c:cd:20:42:1f:a2:93:
d0:68:5f:41:81:c9:43:b2:14:1d:f5:d0:82:c0:8b:ba:d5:d4:
e2:35:4d:e6:ec:5a:bc:60:e0:b8:bf:fe:39:26:bc:3d:56:fb:
b5:4f:a1:df:79:fa:6a:a7:10:d9:19:45:cc:6e:00:1f:1b:39:
96:3c:60:5a:f6:a7:61:ea:8d:cb:1f:d6:e1:5c:80:a2:d2:01:
58:9f:f1:3b:ea:6f:cd:5b:e7:9a:49:b1:9a:4e:08:65:ff:e1:
74:ab:de:14:61:2b:f7:ee:da:56:d3:7a:e7:43:cc:9b:1f:f8:
44:ee:77:3e:da:4a:6d:7a:86:f8:84:e3:5a:dd:c1:03:79:20:
0e:22:32:ce:cb:4f:3f:c0:8d:bc:ef:e8:e6:bf:f1:04:3f:ab:
18:fc:ac:58:66:6e:55:98:8c:1c:2e:7e:6c:f2:c2:99:41:cd:
b0:07:59:b5:d8:96:5e:29:67:e5:83:16:de:3d:1c:fd:7a:07:
3f:5a:46:fa:68:02:1e:dc:5d:53:48:cc:fa:c3:ba:fb:e8:6a:
f4:65:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:21:49 2025 by rpki-client