Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
File: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (raw, json)
Hash identifier: Qlo4+mbKJCym2bywU9/+B9nSR/lgPkj3tiR7WBd3VEs=
Subject key identifier: 5E:BB:95:3D:B0:80:4A:EF:5F:8C:8E:7C:3C:AA:AF:3A:2F:0E:1E:3E
Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial: 0221
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
Signing time: Tue 03 Sep 2024 03:46:34 +0000
ROA not before: Tue 03 Sep 2024 03:46:34 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149784
IP address blocks: 103.190.206.0/24 maxlen: 24
202.20.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Validity
Not Before: Sep 3 03:46:34 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d68699-70d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:92:7d:02:e4:a1:e2:49:98:eb:d6:98:09:
d3:09:e6:17:a9:fa:5c:2a:eb:a4:b7:73:22:62:e3:
c7:8f:6c:5d:9e:59:4b:18:cf:7f:d6:a5:dd:e5:74:
b1:e2:bd:7c:40:f8:e3:99:ad:3e:e6:47:b1:8c:c9:
2e:d8:95:3a:8b:73:ad:43:ae:ff:13:84:7f:80:ad:
00:ba:37:17:94:58:0a:b6:5e:cc:36:43:6a:de:9c:
10:91:1b:3d:c0:a5:0a:cb:f5:fa:9c:0a:77:cd:7e:
16:66:ec:ea:19:bf:42:f0:65:27:70:a2:a2:ac:81:
a7:1b:53:44:c8:ff:20:3d:ef:7e:58:96:78:1f:0d:
a4:1c:97:ba:a1:09:8e:77:a8:e4:22:13:fb:d4:1f:
af:5f:af:0b:d5:2a:ed:f2:cf:8e:49:67:73:80:93:
62:a4:f4:8e:0f:c3:eb:38:54:77:a0:76:4a:ad:67:
11:99:71:16:b5:99:06:2e:48:ab:9c:64:eb:bd:54:
b6:aa:f6:ab:05:04:f2:56:53:04:c6:16:37:df:b5:
60:45:0c:8c:b5:4f:fa:6e:ac:65:57:dc:7c:1d:17:
e3:67:20:4e:76:4c:48:44:ed:15:38:ff:af:dd:31:
cb:76:fd:a6:4a:82:0f:a0:9b:48:21:50:a3:1a:8f:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:95:3D:B0:80:4A:EF:5F:8C:8E:7C:3C:AA:AF:3A:2F:0E:1E:3E
X509v3 Authority Key Identifier:
keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.206.0/24
202.20.67.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c7:10:fe:d9:36:3a:80:9e:69:fb:b1:28:78:c2:5e:6f:7f:
9f:25:ec:a5:c6:be:45:13:45:60:4a:d3:c1:29:50:ed:23:db:
7a:1f:d1:3e:14:06:c7:e9:8b:74:1c:82:04:1d:e8:82:fd:03:
9b:cb:3f:a6:eb:f5:43:32:8f:0e:d0:c6:6a:64:f3:7e:a7:ee:
bb:a7:d6:4e:03:8a:9c:a7:81:1f:72:cb:41:c8:c4:b9:75:fc:
a9:53:0c:8d:09:2c:cb:a2:cf:96:11:9f:5d:b7:56:ef:c0:1f:
42:fa:cb:53:8e:0b:bc:1a:78:2a:43:f4:d3:2d:cf:69:29:33:
59:51:b0:17:94:32:6d:cb:4e:d9:7f:7b:5c:ef:fb:d0:fe:75:
16:ff:98:7b:b8:52:90:eb:5c:99:de:d0:58:12:eb:e8:ce:15:
5f:ea:36:7a:77:50:52:2d:7c:4b:9e:ff:81:79:31:9c:08:dc:
00:92:50:7b:01:17:74:a3:7e:13:63:a5:e9:d8:88:b6:7f:52:
65:1a:c2:c2:b3:f8:8d:24:c1:0c:ab:3c:a4:61:b8:4a:78:64:
71:fb:60:04:31:38:19:ea:20:4c:66:ec:b4:48:97:72:ac:36:
88:b7:74:6f:1f:fa:1f:60:f9:8f:c7:6c:07:72:c6:2f:01:c5:
c4:7f:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:42:39 2025 by rpki-client