Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa
File: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (raw, json)
Hash identifier: JR7LS1ouMF/pgWOplxOG9d3c0ZB+eqWjp+ug4VCz69I=
Subject key identifier: AA:7A:54:49:B7:23:4C:48:D2:D3:AA:C6:35:4E:4A:C3:A9:66:A5:6F
Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Certificate serial: 031C
Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa
Signing time: Wed 01 Jan 2025 00:54:27 +0000
ROA not before: Wed 01 Jan 2025 00:54:27 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136520
IP address blocks: 103.91.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9
Validity
Not Before: Jan 1 00:54:27 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67749243-09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:d7:d6:6d:85:4d:a0:95:1d:98:f2:43:bd:
46:4e:21:df:23:db:28:e6:8c:f1:73:5a:82:5e:01:
31:f2:02:79:07:4d:36:a0:a6:fd:5f:79:a4:b0:10:
62:da:b7:1f:a6:1c:7d:ea:63:a8:6d:2b:8f:df:79:
3c:35:ed:04:2d:96:08:19:45:9e:fd:21:86:f4:db:
9e:8c:74:7b:b3:94:0e:aa:8c:52:61:d6:f2:2e:59:
65:d4:c8:c2:f6:98:ea:11:17:0c:c7:be:5f:0f:4c:
0e:50:1d:9f:7f:80:25:4d:fb:ee:d0:83:c5:bb:b0:
de:c6:98:de:a5:70:55:e6:5c:b3:1a:ea:c0:bd:c2:
8e:25:eb:5f:4b:1d:61:8f:72:f9:cc:bf:ca:38:1a:
3c:e0:3b:ee:96:6c:9d:46:a1:7c:e8:10:dc:44:e0:
37:bd:ae:77:7f:af:04:49:f1:78:60:6b:58:0d:33:
b4:b0:e5:84:ab:e0:4a:88:9e:10:52:db:95:a0:bc:
78:16:30:16:25:02:ce:9e:db:66:b1:f9:ad:4b:ee:
80:f6:64:74:84:13:70:f2:64:4c:1c:c7:d0:33:50:
f5:4c:9a:a5:28:6f:6a:6c:68:84:23:70:09:6f:d1:
85:df:d6:c9:cf:22:a7:30:8d:d0:c0:01:1d:be:5f:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:54:49:B7:23:4C:48:D2:D3:AA:C6:35:4E:4A:C3:A9:66:A5:6F
X509v3 Authority Key Identifier:
keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/2DE4C8AA9B6111EF99A97B52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:45:db:bd:7e:0c:b6:db:ce:36:01:65:e2:32:4b:26:e7:
1c:e2:70:65:5d:c0:a5:76:08:bb:f1:48:6a:3e:de:5a:91:e6:
5f:b2:80:45:44:c8:71:51:16:2a:59:0b:4e:75:68:8e:aa:cb:
4f:d6:18:a4:5d:e4:38:73:9e:29:b4:95:6c:02:93:d1:81:fb:
f8:f8:6c:38:db:59:c6:8e:59:24:9a:54:e6:c5:67:54:8c:68:
a2:32:3f:09:1c:07:cc:18:e3:38:18:76:0f:66:b1:37:33:f6:
cf:00:ac:6f:fc:c0:f8:40:9f:d9:b3:b1:aa:88:3c:bd:97:7c:
bd:a9:be:e1:8c:53:df:ca:54:c4:65:43:74:0d:94:96:87:bc:
8a:26:87:5d:cc:f0:6a:d1:78:5e:ff:9e:47:c9:86:b2:c8:83:
d7:b2:11:6b:2c:8f:8b:67:d6:25:ac:05:57:11:be:7a:58:07:
b8:1d:a5:8f:5c:39:f9:c6:6c:46:1f:f6:ea:54:a8:db:53:05:
09:f1:ee:5a:01:7e:dc:b7:51:02:85:11:c2:77:97:48:31:0b:
bb:5e:56:a7:9a:6a:33:71:cf:1a:b3:9f:da:6a:ed:86:5c:b8:
c7:42:fb:e6:2e:eb:3c:6a:ef:4e:c1:2f:2d:05:f7:07:15:12:
a4:3c:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:48 2025 by rpki-client