Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa
File: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (raw, json)
Hash identifier: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=
Subject key identifier: B9:E2:7E:8E:2E:59:F0:E2:65:CA:5D:6E:30:0D:7E:12:AC:8A:5C:3A
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 0F4F
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:36:11 +0000
ROA not before: Thu 28 Nov 2024 17:36:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45447
IP address blocks: 103.131.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3919 (0xf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Nov 28 17:36:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748aa0b-1623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:54:18:95:60:4e:66:70:66:10:f1:52:25:
9e:62:62:1e:88:21:8c:4e:ed:00:08:af:84:15:d1:
62:f0:f3:c3:4e:75:ac:aa:dc:cc:09:e9:a7:76:89:
a7:3c:51:d5:97:7a:98:2e:59:f9:e4:22:85:5b:4f:
10:df:86:8f:9e:c6:c5:17:7a:2d:bf:35:5e:29:59:
ca:41:c4:9d:98:a7:68:91:a5:72:d9:b8:99:bc:05:
7f:35:4a:b5:95:f5:80:c0:ed:b7:1f:38:48:1e:47:
2c:2c:77:29:10:63:51:58:ec:71:5d:b5:e0:fe:b3:
4c:4c:ae:77:37:76:e7:8b:c2:13:39:23:40:ee:c3:
9f:a8:a4:96:43:28:a6:5c:45:fe:b3:f1:43:b1:bc:
50:63:6d:6b:0b:1f:d6:e6:2f:c8:f9:e5:19:9b:a5:
48:6d:70:d3:fb:3c:51:13:c4:76:a4:1e:0a:87:95:
5c:8a:1b:e3:4a:e5:e7:fe:fc:23:30:7b:ba:53:51:
df:74:66:c8:30:ce:de:79:49:1d:a7:1f:f7:3c:5a:
a5:73:ca:9d:9d:bd:8b:d3:28:f9:63:29:de:eb:e5:
af:80:37:ab:4c:56:6c:75:58:ea:6b:ef:b7:58:7d:
85:72:bb:0e:1c:07:26:5b:ae:d0:22:b9:d7:2f:5a:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:7E:8E:2E:59:F0:E2:65:CA:5D:6E:30:0D:7E:12:AC:8A:5C:3A
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/373ADDFC1CC411EF90865B7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:03:55:ff:c6:a4:58:0b:4d:a1:99:37:d5:ef:7c:13:0a:0e:
a9:92:61:b3:6e:56:0e:87:67:9a:5f:04:d5:fb:cc:20:e1:07:
71:70:31:17:e5:ac:4f:42:3d:0e:17:4d:c5:24:b6:8a:34:4e:
8c:e2:18:c7:f5:62:5b:39:35:19:b4:8d:91:67:a5:00:a3:e9:
7b:0a:d4:33:34:51:b2:6d:3d:81:62:e3:87:ab:b7:ca:8f:82:
57:e5:3e:ca:5d:64:cb:89:15:bc:8c:4c:75:2e:11:3d:76:c5:
9c:fc:6f:2b:7e:79:c8:6d:95:43:32:27:df:88:c7:9d:ee:0d:
40:9b:dd:82:f3:a6:a2:c8:45:26:8f:f8:c5:45:aa:ad:a1:66:
b0:41:f2:bb:b5:06:72:39:f8:d0:75:8f:6c:de:c5:b5:eb:a6:
c2:d7:88:27:da:a2:c9:5a:70:64:07:3a:95:ed:59:56:b1:38:
d2:a2:ce:57:5f:8d:69:56:12:a1:58:f3:54:9e:2d:81:1f:68:
24:22:ce:95:27:d3:7c:9b:1e:4a:f9:d9:10:31:af:85:d3:33:
39:95:44:5f:42:8a:22:3d:ec:07:89:2c:6a:6e:87:44:d1:9f:
0a:fa:12:65:f9:e9:74:19:eb:ae:28:f8:28:d6:37:4a:12:cc:
a5:80:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:01:41 2025 by rpki-client