Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
File: B83B7E0C065511EDB3E94E54C4F9AE02.roa (raw, json)
Hash identifier: tal6R2lkJBoeIIUyi6mdxCD2dqzkhyqrKbW//gzTT04=
Subject key identifier: 5B:4C:8F:93:70:6A:47:E8:BC:CD:04:29:E6:4A:50:95:16:3C:7D:13
Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial: 0220
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
Signing time: Tue 03 Sep 2024 03:46:32 +0000
ROA not before: Tue 03 Sep 2024 03:46:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140736
IP address blocks: 103.190.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Validity
Not Before: Sep 3 03:46:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d68698-4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:71:c1:0c:9e:ca:8a:00:7d:58:88:ca:d8:
5b:aa:f1:16:5b:9f:a0:cd:e8:48:4a:b7:7a:7e:25:
8b:d8:52:e1:56:7e:9d:9a:47:4d:fd:81:94:3d:67:
78:35:10:eb:9e:08:33:fa:8a:25:fe:27:16:8d:93:
00:41:cd:64:74:04:b8:bb:2c:62:90:3f:6c:b7:e4:
ce:c1:a1:e3:d2:08:23:28:70:e4:7a:63:c3:98:41:
81:7a:d4:8c:10:14:c7:1b:a2:68:c8:d9:8a:2f:9e:
87:db:9b:72:44:a0:6b:e3:f4:49:01:14:08:17:bf:
49:4f:9e:7e:68:8b:5f:c6:ef:d7:68:36:83:59:37:
57:78:ea:7c:55:c2:76:2f:a2:39:1f:c3:36:50:5a:
4d:fa:00:8b:51:5d:c1:d6:48:8d:1d:e0:2c:c6:53:
0f:4f:0e:7f:3d:92:01:dd:35:51:90:f5:db:76:a7:
5a:16:7e:77:04:ca:80:0a:a5:88:f3:e6:14:86:1a:
3d:08:bb:ad:35:1f:e2:bc:6c:d4:1f:c1:90:35:c3:
6f:0b:13:60:0e:f9:6c:8d:f5:2d:66:b0:96:4d:52:
68:c6:6d:2c:a4:6a:e8:13:49:47:c6:6f:c4:4f:d2:
fe:0e:50:78:a9:c1:8b:ed:87:db:fe:9f:98:4c:97:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:8F:93:70:6A:47:E8:BC:CD:04:29:E6:4A:50:95:16:3C:7D:13
X509v3 Authority Key Identifier:
keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/B83B7E0C065511EDB3E94E54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.206.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:90:a5:66:d7:00:10:5c:58:4e:76:53:05:aa:d3:9c:22:0d:
55:90:3e:69:34:fc:26:a6:8c:dc:c0:f0:e0:3e:29:35:59:b4:
40:6c:25:08:02:ee:56:a3:25:47:38:0c:ec:36:29:ed:28:1a:
fd:75:52:1c:f0:98:86:7a:d4:ad:d8:1c:21:63:da:23:1f:1d:
2f:25:fa:7f:ae:58:92:77:f4:60:45:57:b0:4c:50:b0:8c:aa:
8b:00:dc:3b:ae:ff:e2:89:7d:e4:a5:c4:69:20:d3:06:ff:9e:
6f:d7:f8:19:5b:df:b4:dd:2d:24:79:5c:2d:53:9b:84:3d:bc:
ec:8d:b0:59:25:7e:3d:ca:50:75:04:c8:97:92:68:6b:5f:1a:
ed:77:d5:92:67:b3:a8:e0:4d:8d:5a:cc:1a:2f:e0:55:5f:e4:
35:6d:11:21:f3:2e:65:5a:e7:d9:67:d3:b8:8a:1a:6b:45:8f:
dc:b4:4f:36:80:57:d6:d6:49:5f:89:c7:1d:b9:62:c6:54:c4:
0e:51:e1:f3:b2:1d:6c:89:16:dd:36:a8:af:32:c9:95:f9:b0:
be:cb:a7:46:b2:b2:54:6c:a1:f6:85:63:4c:52:6a:43:e3:81:
72:96:a8:6d:04:35:0f:b5:e0:28:c8:ca:8e:53:6b:ea:f0:d4:
48:cf:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:33:15 2025 by rpki-client