Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa
File: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (raw, json)
Hash identifier: LnATtYItJoGzNqDT/OfESDCcildtpDcQj0Gi0SQtIp8=
Subject key identifier: 4F:99:B4:20:EA:B1:A4:53:18:D0:8D:38:16:F7:C8:2F:D8:33:A5:9A
Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7
Certificate serial: 028F
Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa
Signing time: Wed 21 Aug 2024 02:45:57 +0000
ROA not before: Wed 21 Aug 2024 02:45:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135391
IP address blocks: 103.97.80.0/23 maxlen: 24
103.97.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7
Validity
Not Before: Aug 21 02:45:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c554e5-0c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:6d:69:a7:fa:80:bb:df:60:00:fd:b4:17:
d3:7b:5c:b9:0e:a4:e5:66:76:a6:03:48:08:1f:53:
13:1b:f1:7d:23:91:00:35:85:d4:25:6b:87:25:93:
24:c3:e0:eb:19:ce:2a:08:a2:7c:79:bb:1d:f4:5e:
bb:0f:77:67:bf:bc:7e:bf:6c:15:de:52:04:1b:49:
b6:78:03:47:5d:d9:a1:27:2d:d8:dd:3e:b1:e7:f6:
7c:29:d1:de:8e:81:84:c5:74:69:fc:26:4f:78:b2:
83:70:f3:21:a9:a2:69:3e:bf:7b:3e:82:78:3d:ae:
80:a6:75:15:ec:c4:b2:9e:e6:cf:94:0d:5e:bc:8d:
e8:6a:3d:a1:c5:6c:44:de:40:1a:f8:1d:f1:26:c1:
62:c8:44:42:43:97:05:30:39:e4:d2:fc:e7:2d:bd:
bb:9d:a3:12:13:a3:1f:e8:d5:f4:e7:9e:82:21:eb:
72:fe:cd:3e:f5:d8:b0:98:bd:6a:a3:51:2f:c3:ca:
45:50:0a:e0:af:83:51:c9:7a:da:2c:cb:fd:cf:ae:
2a:fe:f6:20:88:82:a5:8c:6c:07:8d:a2:fd:06:2d:
35:1c:ef:54:7b:ab:25:5c:a9:e3:76:50:c5:b3:2c:
e9:bd:ec:17:d2:73:a9:d7:07:9f:3a:e0:eb:55:31:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:B4:20:EA:B1:A4:53:18:D0:8D:38:16:F7:C8:2F:D8:33:A5:9A
X509v3 Authority Key Identifier:
keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.80.0/23
103.97.83.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a6:61:cc:a2:3c:ba:99:c4:da:42:20:b9:05:d3:3e:e3:2f:
c2:4d:23:20:a7:35:c8:16:72:c0:a5:2b:65:6a:aa:27:a0:44:
07:c7:54:77:12:5f:e7:2a:ce:d0:a8:d5:87:4d:c9:dc:7e:1f:
2b:0f:64:06:2d:fb:25:87:fb:4c:d7:12:d7:6d:48:10:c7:9e:
c6:f4:3b:3d:20:99:0a:51:87:52:17:d1:11:01:55:12:ec:7a:
4f:0d:f2:8d:44:9a:0d:53:e3:da:e4:b7:43:18:01:17:d7:74:
2f:b2:73:fe:10:bb:a0:9f:98:a2:39:a1:a9:55:9b:4d:a2:de:
df:1c:5a:b3:27:4c:23:a7:d9:22:67:05:a3:8a:fc:04:74:ca:
66:6a:b7:f7:aa:5f:fc:88:9e:b2:df:01:f2:8b:83:ba:9a:1b:
ee:49:2c:65:d5:3c:80:b5:6c:6b:e0:ee:27:ec:e1:6a:33:c4:
0a:db:c1:b7:66:8c:cb:20:eb:6b:dd:00:ab:49:bc:f2:bd:44:
7b:11:30:32:69:46:05:95:15:72:30:4c:08:14:8f:85:ac:61:
82:df:d1:0f:33:c1:09:b0:9f:f6:67:6d:59:db:73:57:d7:31:
bc:c5:92:64:6b:1e:e2:c2:44:4d:9d:4c:1e:2f:9f:b8:2a:ef:
b1:c9:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:10 2025 by rpki-client