Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa
File: F5C5A42C5ADC11EF8061F335C4F9AE02.roa (raw, json)
Hash identifier: jyFeBHdKHmG1HRE/BTdZ4LEVyNfH72ioQGaOrtzmyn8=
Subject key identifier: 8F:77:0B:BA:AD:E8:BF:B0:34:A5:20:D4:EF:B6:AD:99:20:B8:DA:38
Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial: 29
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa
Signing time: Fri 25 Oct 2024 06:22:00 +0000
ROA not before: Fri 25 Oct 2024 06:22:00 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 26658
IP address blocks: 45.127.160.0/22 maxlen: 22
103.196.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Validity
Not Before: Oct 25 06:22:00 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671b3907-1774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:4a:cd:02:78:11:ad:02:33:f7:0a:33:c3:
52:d0:57:eb:4f:ba:52:91:5c:c7:87:f8:56:df:ff:
49:91:7b:8f:0e:cb:2e:91:d5:ca:14:80:9b:30:90:
3d:c2:26:ca:a4:ca:c7:a1:c2:47:0a:05:e0:70:8b:
64:27:54:3f:26:cb:66:dc:71:b8:6b:15:b2:12:6a:
c3:56:96:d3:92:4b:9d:64:02:b7:4c:1e:0b:40:a7:
95:8c:f3:b6:96:3b:7a:77:62:21:4e:b1:87:0f:3d:
6f:19:20:2d:d5:d9:2c:63:5e:fc:75:51:38:ba:c8:
96:ad:f5:79:76:1f:02:a1:e2:b6:46:1e:cc:88:16:
00:34:7c:ec:ee:d1:99:24:cc:3d:5d:9b:c5:52:8e:
13:e7:78:1a:49:05:40:35:d6:4e:a2:0f:07:c6:0d:
f1:01:b4:30:4f:2b:0e:e4:4d:cd:a6:88:11:d7:c5:
5a:8c:d0:90:68:33:ed:fa:79:b4:1a:51:8f:c4:be:
97:78:cb:a2:41:08:77:cc:03:6c:0c:9a:66:a8:52:
60:0f:11:aa:4b:3e:13:94:85:da:93:5b:85:9c:87:
c4:42:d2:ab:90:dd:e2:b0:11:4f:5f:e7:52:ed:78:
f7:c8:4f:a1:1e:18:f9:71:27:4f:12:71:6d:81:68:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:0B:BA:AD:E8:BF:B0:34:A5:20:D4:EF:B6:AD:99:20:B8:DA:38
X509v3 Authority Key Identifier:
keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/F5C5A42C5ADC11EF8061F335C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.160.0/22
103.196.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:aa:75:66:6f:fe:ed:ca:c0:c8:f1:53:ee:b0:53:98:56:4d:
88:99:30:94:0e:e0:86:72:8e:80:92:95:b3:b2:c6:54:f1:11:
81:1d:c3:42:4d:46:26:46:18:5b:b8:6b:bc:4e:63:4c:b7:4b:
e0:c5:b6:24:ae:a6:ec:58:04:0f:a8:24:64:80:f4:47:ef:e6:
f5:39:88:05:3a:9a:02:81:ae:8c:39:45:c1:2a:30:e6:29:03:
48:6c:39:ae:53:70:0b:ef:38:2a:3c:24:8e:25:aa:cb:4a:d4:
ec:9a:3e:14:ac:80:19:5a:ee:77:e4:60:76:8f:71:c3:60:5f:
9b:4e:78:9e:47:c5:3a:91:fa:50:82:21:9d:67:1e:c4:98:42:
fd:aa:7e:76:23:d3:6d:0e:d2:76:b4:6c:d3:05:62:c8:05:1e:
56:34:05:f3:ed:e0:66:b8:45:05:7b:2a:91:38:e9:05:ca:28:
db:55:b8:e2:5f:a1:fb:53:af:7c:65:90:c6:7f:b6:7d:1e:c7:
16:f6:47:6e:97:22:b4:ba:09:05:86:52:cf:9d:e0:1e:1b:be:
bc:3a:04:d0:48:b1:97:cc:23:ef:99:9e:f1:23:8f:78:ae:66:
17:44:f2:e7:d2:04:7f:37:2c:48:5a:cb:29:92:15:e9:b1:e5:
55:fc:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:40 2025 by rpki-client