Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
File: 269D906E0C1D11EF87936F72C4F9AE02.roa (raw, json)
Hash identifier: TkvEA48hkZdfXv9N6AC+PYtqjUdjJ0lc4V/6xa2JEy4=
Subject key identifier: 8E:9C:76:22:6E:B5:6C:57:40:45:AB:0B:F7:9C:05:1E:4A:26:5C:0F
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 79
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
Signing time: Fri 01 Nov 2024 05:48:35 +0000
ROA not before: Fri 01 Nov 2024 05:48:35 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 3491
IP address blocks: 103.215.40.0/22 maxlen: 24
144.48.216.0/22 maxlen: 24
223.255.240.0/22 maxlen: 24
2001:df0:a300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Validity
Not Before: Nov 1 05:48:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67246bb3-7bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:ae:33:19:23:b3:6b:14:1a:0f:f6:fb:28:
3d:d2:22:c9:4e:b8:f1:3b:1d:af:40:55:fe:7e:85:
32:a2:73:a6:31:77:f1:42:80:2b:cc:a1:df:38:4f:
94:1e:30:cc:a5:85:c0:a0:87:b0:5f:0f:d9:40:2c:
4e:ea:48:89:5c:d1:db:34:f9:18:ed:16:6d:ef:a1:
82:c4:f1:32:bf:2f:d6:c7:b7:ea:1f:90:63:38:be:
a3:9b:e7:dd:ee:20:7a:ec:65:72:74:95:ae:03:97:
64:3e:ab:1c:d7:bb:32:0a:3a:1e:ea:01:e4:d9:f1:
ed:86:70:8f:5b:fa:05:5d:fb:b7:6d:bf:c6:77:6c:
09:e4:4a:62:fa:57:7f:35:08:9d:8e:52:cd:ea:73:
ea:3b:c6:94:1b:67:7e:19:70:c7:09:02:f0:56:99:
58:73:44:8e:88:14:5f:52:1d:3a:28:72:65:45:f4:
4a:57:2f:30:bd:9f:43:69:21:a9:97:e3:66:5d:8d:
2b:c2:d5:2a:35:3f:4e:4c:94:8f:b0:77:78:75:a8:
8f:2a:e0:fe:d7:35:05:f1:b4:a2:8a:6a:d7:e5:5d:
b3:0c:98:5e:87:7f:ce:ec:36:04:ce:b8:f7:77:28:
58:e3:1c:2b:ae:b2:61:b7:b9:a7:4c:b3:7a:ba:d4:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:76:22:6E:B5:6C:57:40:45:AB:0B:F7:9C:05:1E:4A:26:5C:0F
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/269D906E0C1D11EF87936F72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.40.0/22
144.48.216.0/22
223.255.240.0/22
IPv6:
2001:df0:a300::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6f:60:0f:67:4d:81:b2:5d:96:72:fb:82:24:2e:08:35:66:
06:25:18:1f:0a:d6:9d:81:37:8f:7d:ca:12:51:b2:41:02:e1:
ad:38:49:c6:32:99:d4:1f:2a:1c:11:a0:92:d9:dc:d7:a4:67:
2a:5c:41:e6:db:f5:fd:52:b2:1a:76:2c:1a:1a:58:12:c5:d9:
9c:96:ba:c9:82:99:19:5c:f0:43:01:3b:d8:44:51:10:f5:5b:
70:a9:18:44:41:02:1e:bf:69:da:36:87:2e:8e:87:a8:ea:b8:
22:a3:32:2d:70:a4:59:4c:e9:d3:5c:e9:61:41:ac:c7:64:9f:
d5:ad:12:4f:bf:19:0f:81:ad:ea:a7:e7:87:d3:ea:2c:13:99:
15:3a:72:67:46:f2:e0:a5:b0:b0:07:6d:99:a3:70:16:91:dd:
d4:35:76:47:70:c1:c4:c2:6c:6b:44:3d:ba:38:67:f7:32:46:
26:93:da:eb:f1:46:3f:63:34:f0:df:03:0c:6c:b4:70:12:c5:
ba:0d:1a:f0:12:6d:40:c9:d0:b8:4c:bb:80:65:69:15:e5:48:
91:cf:7e:df:01:dc:c1:fe:26:4a:52:79:ca:7f:c6:0c:f7:02:
b3:81:f2:d8:1e:7c:a3:23:20:ab:94:39:9f:f5:87:5a:e7:0f:
46:91:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:22 2025 by rpki-client