Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa
File: 91A151AA4EB711ECB3446372C4F9AE02.roa (raw, json)
Hash identifier: aV3SWAP1odDDYBEMaGvr/xjXShee1y0K3p4Uqicd5/M=
Subject key identifier: C7:11:FD:E5:7E:65:92:A4:A5:33:72:C9:74:55:69:A1:D3:E0:64:4C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A39
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:06 +0000
ROA not before: Thu 30 May 2024 16:02:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135256
IP address blocks: 45.248.188.0/22 maxlen: 24
103.217.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35385 (0x8a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:02:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2fe-faf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:db:2f:bc:47:da:e4:d5:67:20:4b:62:14:
5c:b1:46:5e:71:c9:85:74:15:04:a9:87:2e:91:52:
3e:2c:11:1f:9e:7c:ce:39:fe:9d:ea:cd:e7:63:d6:
80:3f:4e:da:d4:63:96:f0:68:6b:eb:ed:dc:42:56:
0d:23:ef:73:f5:b3:eb:a4:55:b9:a0:22:b6:12:7e:
3e:d4:22:af:f1:04:55:c2:ba:1d:e6:78:6e:e4:86:
e2:75:92:d3:0d:f3:eb:22:f9:de:ed:ee:68:be:8a:
85:a8:00:73:20:b7:9c:71:3e:86:4f:83:fa:7c:6c:
7b:9d:b2:48:7c:6b:85:96:7b:c6:cb:9e:60:0f:4d:
c1:4c:5a:71:bd:42:fb:31:98:c9:ad:fc:f5:12:f7:
96:ab:8a:d4:19:25:b2:25:f0:f8:eb:db:72:ac:65:
da:c1:ce:e3:d2:20:92:e0:79:9f:ed:32:eb:e3:43:
83:d9:c8:8a:f2:20:27:7c:a9:bd:5e:ba:e5:b4:b9:
2a:71:b9:c5:cc:1c:40:c1:7d:38:10:20:e4:6b:60:
91:4e:9e:42:65:ee:fc:4e:bb:56:82:85:b7:b8:85:
95:07:d0:6d:50:0b:6f:12:35:6d:84:0e:1b:bf:64:
94:0a:2a:4a:9d:8b:51:85:05:76:5c:cd:d2:6f:e8:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:FD:E5:7E:65:92:A4:A5:33:72:C9:74:55:69:A1:D3:E0:64:4C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.188.0/22
103.217.148.0/22
Signature Algorithm: sha256WithRSAEncryption
80:af:ce:da:20:3d:74:7f:fe:f6:74:10:4c:78:2d:97:9c:15:
09:bb:8e:a9:d0:e0:bd:d7:cd:c0:cf:4a:3a:89:57:e2:0c:8f:
5c:73:c5:96:d7:bd:4a:81:1a:81:1e:24:cf:eb:34:2f:96:7a:
12:72:f4:ec:f2:c8:4c:33:ff:81:79:4f:5c:d1:45:35:58:4d:
a8:c9:9a:ce:b5:23:87:5c:b3:7e:9b:58:3e:c1:9f:d5:f3:fc:
98:e9:42:27:f7:54:33:db:4e:7e:67:8f:8f:8c:c2:28:7b:3f:
04:b3:9d:d2:35:46:12:fd:be:84:ad:9a:c2:2d:b8:39:8b:10:
64:d1:48:75:78:77:d6:e1:76:35:ec:d5:5d:dc:aa:de:8f:01:
b4:43:1a:32:f6:73:b8:0d:5d:a4:ca:e0:ad:86:83:f2:62:1b:
07:4f:ee:36:9d:98:6b:c4:41:e8:00:2a:d8:6e:ca:3d:34:d4:
64:9a:cc:c9:0f:74:36:64:8a:50:5a:79:f8:63:4c:b2:9b:88:
4d:da:10:e3:e8:05:00:c3:77:34:73:45:c7:92:94:68:d5:00:
63:b7:a3:1c:23:ee:9d:8c:3a:64:6f:6c:12:7d:62:99:b5:0e:
8f:ba:a6:11:b7:0c:99:bc:1d:40:a3:e3:ca:01:87:7a:65:7e:
c3:72:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:58 2025 by rpki-client