Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
File: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier: zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=
Subject key identifier: 63:65:8E:69:45:FF:7A:7B:0B:73:2F:D8:2B:F1:13:B7:28:E6:FC:1E
Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial: 02AF
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
Signing time: Thu 19 Sep 2024 01:35:05 +0000
ROA not before: Thu 19 Sep 2024 01:35:05 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134416
IP address blocks: 103.42.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Validity
Not Before: Sep 19 01:35:05 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66eb7fc9-9be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:ed:44:5a:23:90:55:0f:21:b5:10:c3:43:
31:a3:90:e3:f0:a6:24:1b:02:3d:ff:74:f9:12:f3:
66:f2:fd:b7:02:8f:16:19:28:ee:08:e8:ff:be:6e:
02:38:07:9a:b9:34:47:cb:6f:5e:b7:8f:fe:cc:1c:
c3:39:b0:7e:d2:51:de:ad:d2:4f:3c:d6:db:33:3e:
b8:c5:61:bd:ed:2f:7f:e5:28:5a:3e:51:f1:db:8c:
b8:8e:92:85:e4:d0:f0:0a:1e:06:f9:ed:7a:4f:8d:
ea:12:7e:02:f2:e9:89:15:1e:6a:55:2f:c9:3a:12:
5a:94:06:85:36:96:e2:c6:45:aa:f0:b3:6a:65:c1:
59:be:24:a5:24:8c:6f:57:a6:bf:78:d0:ae:c7:56:
48:ca:fa:57:a8:a6:3b:e7:95:f0:8c:a0:f2:27:da:
45:4d:75:e7:8a:60:42:c6:0c:3c:a6:30:31:03:9f:
d5:ee:3d:c7:8d:59:ef:f9:2f:c8:63:b5:f3:9a:78:
b9:2f:fe:0f:68:e6:4e:30:9e:31:ac:15:ff:fa:a8:
fc:62:d7:6f:89:15:44:3b:cc:2e:c6:d0:63:cc:d5:
8a:b0:cb:d8:0d:9d:50:bf:39:de:6d:4d:fc:0c:58:
aa:58:69:19:98:bc:71:84:64:d5:0c:75:be:bc:5c:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:8E:69:45:FF:7A:7B:0B:73:2F:D8:2B:F1:13:B7:28:E6:FC:1E
X509v3 Authority Key Identifier:
keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cb:0d:76:b1:e7:72:c7:5f:60:86:d7:50:e2:83:46:8b:97:
a4:37:99:b6:54:0a:20:e1:6c:a1:bc:3e:92:6d:21:4b:b4:dd:
97:e0:83:f5:39:6c:19:c0:cb:a3:90:02:13:8d:78:57:d5:20:
82:71:b6:bc:b2:2a:b8:f5:c4:0e:db:d7:87:e9:bc:27:e7:3d:
a4:cf:c7:b5:9c:d9:ce:b2:27:b0:f1:7e:1d:31:74:2c:ea:32:
62:bf:e3:45:9d:31:13:c5:70:f4:f8:fa:d0:9e:16:6a:09:06:
7c:44:d4:9f:f9:2d:f0:13:e0:82:89:a3:64:37:ad:49:99:7a:
b1:65:cb:c4:7d:26:d0:8e:af:e1:e8:61:8b:bc:54:36:0e:77:
fd:95:1f:02:6f:43:db:bc:ec:63:ea:f7:ae:d5:7f:14:cf:f8:
a8:f3:cc:06:6e:2b:ac:65:fd:1b:65:3d:1a:9e:2a:ab:b6:d3:
db:bc:f7:79:0b:0d:93:9c:88:ac:8d:5e:eb:9c:b1:a3:4d:d0:
cd:42:65:3d:ad:02:03:cb:fb:0a:6e:19:15:f0:df:c5:9f:3e:
f6:96:ad:17:23:c3:1d:c4:b0:f7:f0:96:0d:eb:03:0c:92:26:
a9:db:fa:07:6e:56:31:36:c2:61:df:f6:49:99:fe:cc:45:2d:
39:86:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:44 2025 by rpki-client