Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
File: 2201EFC86E5211EEB027A974C4F9AE02.roa (raw, json)
Hash identifier: 4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=
Subject key identifier: 0E:A8:0D:71:9D:51:FD:79:CB:6B:3B:B1:94:9C:3B:78:DC:32:EE:AA
Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial: C5
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
Signing time: Sun 03 Nov 2024 03:57:54 +0000
ROA not before: Sun 03 Nov 2024 03:57:54 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 38203
IP address blocks: 103.65.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Validity
Not Before: Nov 3 03:57:54 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726f4c2-299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:4b:a0:4a:07:c5:2f:8a:6b:ee:6a:54:cd:
6c:7d:50:a9:65:1c:9a:c4:fc:c2:a8:c6:e5:26:8f:
54:66:6b:d5:b6:e9:d7:a4:f9:ad:b6:a2:58:5a:a2:
51:2a:cf:2e:94:b4:37:1e:62:80:24:b5:b0:7c:b2:
df:39:8a:b8:92:c4:f2:01:71:78:37:f4:75:c9:07:
48:45:08:77:a0:48:34:b9:c8:24:5d:64:af:7e:0b:
a0:e5:cc:6f:c9:0c:a3:13:32:24:10:c8:50:23:17:
c5:2e:01:c5:50:22:aa:dd:c7:9e:f1:a7:a8:d1:90:
a3:4d:a1:ee:33:50:da:aa:d7:a9:9f:26:6b:dc:9a:
e5:6e:57:27:23:c0:2a:76:d5:8c:ff:de:15:01:ed:
64:55:13:48:db:98:43:24:31:c9:37:2b:79:a5:28:
26:39:ac:09:cf:c7:64:71:e4:dd:32:e8:11:cf:07:
85:51:b0:94:e4:79:83:7a:c9:53:00:05:c6:67:56:
69:70:4d:5f:5d:d0:c9:4d:e1:00:58:b6:0a:07:88:
d4:51:da:81:a1:2a:b5:1d:2a:e1:72:d0:c6:2a:7f:
ab:21:02:e9:52:84:b7:c6:07:45:91:28:fe:20:64:
ed:de:cb:7a:c7:5c:c7:a6:eb:49:b7:b5:6c:40:aa:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:0D:71:9D:51:FD:79:CB:6B:3B:B1:94:9C:3B:78:DC:32:EE:AA
X509v3 Authority Key Identifier:
keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/2201EFC86E5211EEB027A974C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.132.0/23
Signature Algorithm: sha256WithRSAEncryption
97:e8:90:e1:9b:1d:4f:0f:15:2b:cc:c5:4e:8b:0e:ff:90:af:
99:31:4f:46:af:04:70:27:2c:9d:72:50:9b:96:da:34:c0:ae:
d7:e1:72:88:28:7d:9b:b9:97:8b:d1:96:c4:fc:13:62:53:9b:
bf:16:e2:33:e8:61:ff:7c:2e:53:33:29:8c:76:85:26:e2:1b:
fe:87:be:e5:bd:a0:ac:bd:e4:8c:59:4b:6a:2f:8c:56:14:bd:
f8:11:c1:50:53:a5:15:73:cf:58:a4:2f:55:ec:bb:a5:28:af:
38:13:ee:64:30:dc:58:2d:e5:04:68:37:9e:bc:8d:ec:b3:57:
d5:69:94:e7:c8:d8:95:07:80:c7:5b:8d:48:63:5b:18:8f:cb:
c7:5e:63:df:d1:c0:25:3b:13:3c:0b:59:9b:db:0b:69:20:69:
58:e8:19:81:65:69:1e:08:63:46:f4:b6:7f:8b:b2:e0:5a:ed:
f0:0e:ed:ca:f7:92:ba:2e:99:1e:2f:62:2f:20:e5:1d:f4:ce:
f8:d9:52:f8:91:e8:34:79:1a:41:61:7c:b7:15:c4:2e:7d:a5:
d0:60:2f:70:75:f3:4b:da:e3:41:fa:f6:54:c8:cb:b8:61:40:
5e:db:37:ab:33:c6:c6:89:80:cc:ee:fb:78:fd:bd:e1:f7:b7:
16:93:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:16 2025 by rpki-client