Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
File: 6901B0861DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=
Subject key identifier: B7:1A:8A:F7:33:E3:9B:6C:57:BC:49:D2:56:7B:CC:A7:6E:A6:DA:73
Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial: 01BD
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
Signing time: Thu 15 Aug 2024 03:24:55 +0000
ROA not before: Thu 15 Aug 2024 03:24:55 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 150164
IP address blocks: 103.142.0.0/23 maxlen: 24
2001:df1:2440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Validity
Not Before: Aug 15 03:24:55 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bd7506-ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:01:92:71:4c:e0:21:ad:27:49:3f:36:7d:
1a:93:3d:e1:f4:0d:03:ec:fe:55:d8:ea:3e:d0:4d:
51:77:0b:b6:f6:f4:d4:1e:b8:62:ba:bd:c1:5d:b7:
d4:44:3b:2a:09:de:6b:8e:64:b2:d7:a3:d3:47:34:
9d:d8:7d:c2:44:6e:d7:3e:96:db:55:e9:1f:b4:96:
f4:5b:c6:4e:f3:3d:66:25:ea:dc:95:11:c2:7d:3f:
2c:1f:92:3e:77:cc:e9:85:45:ae:5a:0f:e8:3f:af:
b1:ae:b3:33:92:2b:07:bc:33:b0:d3:47:a5:c9:9a:
e6:7a:1e:a2:6a:89:8c:f5:ca:fb:1e:e3:b0:14:39:
a4:d3:0f:5f:32:fe:9e:15:a0:5c:87:60:33:6f:25:
87:75:f3:c1:b7:df:69:5b:dc:cf:89:ea:4e:bb:c5:
52:73:64:56:40:57:f4:be:bf:ab:b2:a8:ce:02:e1:
31:e6:a5:38:6c:c4:55:65:75:c1:e5:c7:76:6b:62:
95:04:ea:09:c0:df:ae:ec:4f:59:ab:d8:d7:d9:7d:
a2:03:21:f3:48:60:6c:3e:a0:16:72:6c:a7:62:84:
6c:99:0e:f2:45:3e:21:f0:64:9e:40:1e:55:bf:31:
8e:a0:81:fe:30:79:b3:b7:01:87:fa:ee:be:5c:d8:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:8A:F7:33:E3:9B:6C:57:BC:49:D2:56:7B:CC:A7:6E:A6:DA:73
X509v3 Authority Key Identifier:
keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/6901B0861DF211ED95A51A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.0.0/23
IPv6:
2001:df1:2440::/48
Signature Algorithm: sha256WithRSAEncryption
9b:7e:51:54:3a:8c:84:4c:36:68:e2:99:3d:ac:74:13:d8:b6:
ab:e0:2b:8d:b8:b0:15:d5:41:4f:61:72:b3:1b:13:64:88:d8:
72:4f:73:08:29:bc:d5:0b:67:3e:f4:55:b0:f7:72:d4:4e:e5:
00:93:d4:1c:58:a4:f5:73:fa:f6:9e:4f:9e:ff:14:a5:10:52:
67:e5:ae:1a:0a:f9:08:4a:52:5e:52:92:78:a0:ea:4f:13:da:
8e:ce:89:2c:8f:70:83:40:5b:bd:6c:5d:33:65:c0:59:b5:4e:
87:4d:f8:90:1d:58:92:16:0c:08:e5:c7:28:1c:73:46:26:ec:
36:5b:cf:aa:a4:1e:91:23:ff:b7:69:f0:74:47:ff:a8:aa:e7:
88:ec:cb:88:ce:bb:4c:0c:c6:63:3b:87:e1:2e:ff:a3:78:99:
8c:88:bb:fe:52:67:44:00:4e:b6:81:53:5e:19:71:17:31:db:
2e:ee:13:0e:87:ec:a0:0d:5b:e9:6a:5b:5c:91:01:fa:54:bd:
07:6f:4f:70:d5:24:fe:a9:71:a3:e2:71:07:2f:ff:37:9b:88:
64:20:c6:58:b9:49:3b:d5:65:f6:6a:a0:12:91:a8:41:72:9b:
81:ce:f7:19:b5:1d:e9:02:30:b9:40:e5:ac:3d:3b:fc:da:36:
2d:29:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:43:43 2025 by rpki-client