Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
File: 8C5D4FF4766511EF8820F844C4F9AE02.roa (raw, json)
Hash identifier: B9akMsoRDWVX9pojvTb/hR3plmtBWRHwS0hIvuBtoYg=
Subject key identifier: 72:AE:0D:21:51:75:F2:7A:8E:2D:A4:07:AB:3A:7C:82:22:C5:E2:39
Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial: 030F
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
Signing time: Thu 19 Sep 2024 09:00:00 +0000
ROA not before: Thu 19 Sep 2024 09:00:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45250
IP address blocks: 103.183.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Validity
Not Before: Sep 19 09:00:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ebe80f-1e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:b1:c9:0a:ae:24:08:2f:11:65:8a:54:f6:
cc:95:b0:6e:4b:96:25:91:8d:41:08:49:57:dc:cb:
80:60:88:8d:63:8d:0f:79:39:78:01:02:d4:ac:1e:
b0:3b:92:04:69:b2:b8:5c:b7:77:dc:21:d1:a2:a5:
88:1b:9a:06:ea:9e:80:c4:a9:2b:4a:6a:cf:a4:7d:
a2:19:3d:6b:3e:38:69:49:af:93:61:b2:62:60:2b:
67:44:95:fd:eb:da:b5:2a:0c:4e:b8:fb:4c:2e:c8:
9d:ec:26:da:05:64:56:11:52:b0:aa:45:5e:a9:af:
18:2f:c0:08:5a:21:0d:29:8d:4a:73:4a:aa:22:c9:
50:ee:92:94:b0:7a:19:ec:08:1c:44:17:86:1f:4e:
9b:21:41:07:35:03:09:e8:0d:cd:02:e6:85:20:42:
77:84:90:58:a3:54:31:b8:b1:9a:48:89:29:91:8a:
03:b4:68:12:4c:97:20:34:20:b7:ef:cb:02:b3:c6:
eb:a4:fc:43:61:ff:75:9e:b1:be:3a:86:af:56:a3:
47:6d:0d:9f:e6:9c:38:c8:1e:91:4a:59:20:58:49:
28:98:36:0c:d9:d1:cb:45:bf:8f:e3:23:47:b8:8e:
73:ce:24:3c:18:77:58:6e:7e:ff:e0:3a:fb:82:24:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:0D:21:51:75:F2:7A:8E:2D:A4:07:AB:3A:7C:82:22:C5:E2:39
X509v3 Authority Key Identifier:
keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8C5D4FF4766511EF8820F844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:19:fd:84:d6:43:66:91:cd:0a:83:29:3b:04:b6:1c:64:2a:
a7:f4:68:1c:b5:b6:fd:83:bf:0d:55:dc:90:d1:9b:7f:08:90:
5a:64:0a:61:ec:1b:e0:d3:c4:f7:62:d8:8c:b5:42:6f:cf:27:
cc:de:9f:83:84:86:35:9c:16:5a:89:c3:1c:03:85:dc:84:31:
a6:5f:09:8a:af:1d:ba:95:d8:eb:b1:a2:b7:63:fe:1f:6a:5b:
29:cc:d8:15:48:32:07:3e:65:ea:87:4b:c9:2f:57:e9:2c:7a:
b3:76:89:1f:bb:45:e5:7a:2d:06:04:41:0a:bb:67:4a:63:20:
8c:e2:23:63:78:5d:c9:7d:27:a7:97:64:d7:74:15:9b:8d:9f:
a1:23:c1:e9:96:ce:ad:19:9c:c7:73:10:69:df:60:7e:f4:11:
e9:1e:86:d1:42:95:30:d4:8e:5a:aa:3f:bd:ec:d9:9b:6c:22:
dd:4a:8c:7c:43:ef:ad:ec:b3:c1:65:fd:c4:56:44:3b:2b:1a:
5a:90:43:07:87:32:b3:48:64:20:c3:2f:e7:c8:0a:5b:58:b8:
61:28:33:41:6e:d0:ec:6a:17:4a:f9:fc:a4:44:8f:73:a8:58:
50:0c:b9:c4:1e:22:6d:6f:10:85:c7:f3:96:59:fb:d3:82:a7:
ae:61:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:48 2025 by rpki-client