Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
File: 8879DC04990611EF9BA6A76EC4F9AE02.roa (raw, json)
Hash identifier: QMqZliYIzALZLrdF4dbF8vk9DUXnAXmdWeIPAlbr7lk=
Subject key identifier: AE:AB:F3:7A:8D:C2:A0:DF:8A:98:C9:C5:DA:94:A7:83:7B:C3:0C:6E
Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial: 0163
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
Signing time: Sun 03 Nov 2024 02:35:52 +0000
ROA not before: Sun 03 Nov 2024 02:35:52 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 62864
IP address blocks: 103.101.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Validity
Not Before: Nov 3 02:35:52 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726e188-cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:76:f4:b4:93:40:d6:b0:4a:49:ad:dd:a4:
2d:a1:ec:32:29:3a:61:de:e5:b3:67:bd:7e:78:81:
c4:c1:d1:5c:e8:a8:c2:a6:ac:d5:64:0e:06:28:32:
3c:4c:d7:39:2a:94:a0:8f:11:9b:b8:51:14:1b:82:
7e:d4:8e:3c:f9:e8:30:07:16:f8:e8:62:d7:d1:e2:
aa:04:5d:70:59:95:57:45:53:45:09:3c:86:6f:95:
45:b2:39:6d:5f:95:d3:10:85:ea:d0:ce:52:88:22:
82:74:b6:b9:00:66:16:c3:e2:57:96:9a:d2:c8:e0:
5a:20:a8:1a:d3:54:52:6d:be:d6:a5:a5:11:f6:99:
1d:d5:65:91:f3:09:0d:80:54:7c:ae:cc:04:38:da:
84:ce:c2:d7:5a:99:53:80:ea:9d:51:96:40:9f:58:
22:fb:e7:08:c8:dc:59:10:e3:77:3d:69:8a:a2:14:
1b:0f:c8:f6:25:1d:c4:46:b2:9e:3b:2e:4d:5c:2a:
7a:ce:47:ba:0f:33:23:d1:6f:61:f8:3e:eb:e0:f9:
3a:4d:27:00:90:95:9a:75:36:e0:3d:cf:b3:e6:74:
92:b9:71:61:45:ab:13:8c:b5:89:90:58:51:53:2c:
64:0a:c3:96:a1:36:8a:6b:79:68:0c:3e:3a:25:ca:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:F3:7A:8D:C2:A0:DF:8A:98:C9:C5:DA:94:A7:83:7B:C3:0C:6E
X509v3 Authority Key Identifier:
keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/8879DC04990611EF9BA6A76EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.222.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7b:fe:e1:13:85:75:96:49:6e:c8:23:fd:45:34:97:66:bb:
da:ff:ea:9c:90:c8:15:75:f9:de:00:a4:7e:76:4c:f6:bc:e6:
82:78:10:74:dc:8d:98:f7:37:00:5b:75:b3:85:52:e9:e7:5c:
77:dc:d5:02:3f:5b:ac:b0:4c:40:b0:f2:5b:46:2c:8f:b2:8d:
4c:cf:54:3a:39:50:a7:f5:02:3e:ba:68:28:4f:4d:34:46:5d:
21:b7:c9:4f:cd:f9:43:1f:6f:43:a5:0b:be:e7:fa:2c:43:d4:
e0:09:4e:55:7e:dd:a8:ad:19:1d:b1:ff:25:54:10:9f:fa:f1:
82:4d:18:a8:a3:06:6a:0e:39:d4:94:11:6b:7c:be:e6:8e:ae:
9d:d8:2b:0d:42:ef:b9:06:0d:29:8d:82:4a:a1:ff:5a:28:f7:
64:28:3a:dc:71:d7:96:56:9b:6c:d1:06:43:7b:a2:46:5e:06:
b7:91:a5:a1:4a:26:06:f3:d6:a3:ac:81:8d:24:74:b8:77:47:
f3:ba:c6:66:d7:5e:e3:a6:df:e7:da:e3:79:33:69:51:16:d9:
e2:66:c3:4c:c9:44:5b:75:ff:f3:5d:13:34:71:55:75:88:c7:
d5:d8:4f:12:c2:f6:69:2a:df:ed:ca:58:14:d4:7c:7f:04:a3:
18:e9:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:45:46 2025 by rpki-client