Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
File: 278C467E4DF911EE8927F265C4F9AE02.roa (raw, json)
Hash identifier: ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=
Subject key identifier: 85:BD:CD:46:69:48:BA:12:11:37:22:02:37:9C:88:A5:22:CC:89:44
Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial: AE
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
Signing time: Thu 01 Aug 2024 06:07:51 +0000
ROA not before: Thu 01 Aug 2024 06:07:51 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151482
IP address blocks: 103.230.130.0/23 maxlen: 24
2401:1220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Validity
Not Before: Aug 1 06:07:51 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66ab2637-212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:23:9d:5e:91:7f:e3:a1:5f:1c:6e:c7:b2:
28:29:c1:2f:2a:6c:9c:46:08:39:16:dc:06:7d:d3:
e6:ef:2c:00:cf:8d:93:95:5e:cc:dc:7b:ba:f8:1d:
37:d3:91:0c:b7:51:4c:a7:b5:b5:b2:09:54:22:89:
b8:35:bc:fd:4f:07:84:80:e0:33:7f:a1:48:ec:81:
47:c3:50:a8:46:bd:17:e7:03:7a:c0:70:df:92:ab:
63:fd:14:4a:d0:2a:23:13:0c:27:50:5a:50:6e:d4:
3a:e8:83:ae:40:e3:b8:46:2d:bb:dd:28:c9:69:61:
44:23:3c:2f:07:59:af:73:b6:e9:50:7f:35:65:2b:
03:91:c0:97:76:85:aa:f0:cf:f4:b5:a3:a2:f2:f6:
e1:19:3c:2c:c4:40:cf:dc:00:a6:70:a0:6f:04:f1:
22:8c:08:3f:a8:c3:66:28:02:f9:c6:c6:5e:13:6a:
b7:52:f5:f8:a1:ad:87:42:b7:ee:97:b4:98:32:0f:
63:48:37:1f:0d:db:17:6a:3a:0e:6c:21:65:fb:c1:
8b:78:96:39:df:3f:00:ff:e6:ef:59:c4:e8:44:38:
d9:e1:db:01:05:44:96:16:61:20:b5:89:07:8e:b9:
22:d5:49:f7:63:98:78:1e:fe:00:79:73:3a:a4:5e:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:CD:46:69:48:BA:12:11:37:22:02:37:9C:88:A5:22:CC:89:44
X509v3 Authority Key Identifier:
keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/278C467E4DF911EE8927F265C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.130.0/23
IPv6:
2401:1220::/32
Signature Algorithm: sha256WithRSAEncryption
8c:f5:09:83:b9:be:d0:02:86:46:67:bd:cd:14:ed:a1:bf:92:
03:7b:83:5c:db:c1:35:a3:34:7f:fb:43:ec:39:91:a6:87:3f:
a7:0c:c7:66:36:08:ae:f2:5a:a0:7a:c0:ce:22:bf:50:94:0f:
47:a2:7f:c6:de:62:dd:c4:d0:f8:15:f4:8e:32:ac:68:a9:8a:
90:b8:88:92:36:05:b0:5a:77:43:83:8f:4a:3d:62:0a:4e:e4:
8c:4b:f0:51:6e:20:b7:b3:b0:ec:59:16:2e:a4:c2:2a:8e:15:
c2:e1:be:a0:bc:3a:b8:f7:ce:fd:94:f6:49:e0:34:0a:86:1c:
fc:8e:83:c4:73:a9:71:e8:97:02:86:f0:7f:e4:44:62:8b:40:
66:a8:e3:ed:2d:48:fc:79:47:6a:3c:e1:d4:da:ca:4c:2a:ff:
49:7a:20:9f:25:50:5a:3a:a1:39:ca:01:1d:b6:08:b6:16:9a:
f2:17:0c:7a:fa:0b:f5:49:0a:77:41:a8:a5:37:d5:42:4b:cf:
70:00:95:d6:29:6d:23:7e:82:78:ad:65:d0:b0:a4:78:51:1b:
e7:b8:e4:5e:69:e1:37:b7:ad:de:bf:6d:e2:66:eb:67:db:80:
95:a0:48:84:fb:43:54:9e:fa:c8:9f:8d:4b:dd:01:b5:07:24:
df:4f:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:18 2025 by rpki-client