Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa
File: B9A66D88A22A11EFBF21F71FC4F9AE02.roa (raw, json)
Hash identifier: sJ9rownef2CuWKRi/w4mxoVdH5UibFjmiR4ta9WSY3s=
Subject key identifier: 1C:DE:A9:AD:C8:26:A4:A3:FA:28:5C:E9:8D:D6:6B:51:5F:34:6B:50
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0B1E
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa
Signing time: Thu 14 Nov 2024 01:49:46 +0000
ROA not before: Thu 14 Nov 2024 01:49:46 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.15.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Nov 14 01:49:46 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6735573a-9a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:b8:9e:fe:7b:43:b7:a8:7b:f9:99:84:29:
1a:84:01:d7:aa:26:af:06:33:3c:5b:80:9d:50:9d:
4d:bb:f2:a3:95:2c:2d:3c:07:e5:2c:d0:0a:0a:2c:
01:42:43:d5:72:12:d2:ee:2f:d1:03:af:db:b8:58:
7c:9c:f5:b8:50:c3:61:f1:65:5a:a3:40:0b:97:b6:
68:b9:d1:3d:cf:f6:35:e6:fb:6f:51:9e:30:3c:57:
0d:f7:9e:d0:29:e3:5e:69:eb:02:40:a3:e4:d4:30:
c3:84:4f:61:df:f6:4e:6c:48:e6:fe:ce:50:72:a0:
47:7e:7b:75:eb:31:cc:8a:02:cf:c0:a0:d2:b9:3c:
95:2e:a6:88:79:3f:be:53:94:de:8e:7d:35:c9:23:
63:ac:a9:05:cc:6f:26:ba:ee:db:51:df:81:ec:27:
9f:7f:19:60:f4:4c:cd:4e:f1:45:63:31:ea:cb:09:
ff:fb:ee:97:de:34:36:67:28:6b:39:4e:26:6a:51:
ae:fc:81:ec:82:f3:58:c9:eb:5d:f0:2d:58:78:56:
01:19:ea:31:12:7f:45:dc:fe:6d:26:a1:48:86:e4:
51:e1:b9:1d:bc:4e:26:46:43:ba:1f:98:19:bd:4b:
4f:76:ce:0d:18:d7:d6:d9:c3:53:15:12:dd:89:27:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:A9:AD:C8:26:A4:A3:FA:28:5C:E9:8D:D6:6B:51:5F:34:6B:50
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B9A66D88A22A11EFBF21F71FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.32.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:70:7f:92:d6:0d:70:3e:10:54:90:ca:52:8b:81:2b:b5:
e0:ba:3b:d0:ad:84:b2:f2:05:0a:f7:4a:17:80:ec:ef:41:c5:
76:a9:41:c5:31:59:a7:14:32:86:cd:f1:a8:76:fb:d6:f4:62:
04:86:69:52:c7:4c:c4:14:0f:53:92:97:84:1c:b1:15:0d:2b:
f1:8a:fe:04:3d:d1:f5:2c:11:e2:50:fe:3a:c6:f1:61:b3:38:
82:00:27:35:b2:16:68:c9:d3:28:cb:a7:74:62:d1:da:32:a3:
02:f7:1d:21:24:ec:a3:ac:38:16:e5:fb:3b:d3:a4:93:0a:92:
44:1d:d7:c8:71:6a:88:be:eb:dd:d7:9c:2f:b8:fe:ae:a8:29:
f8:24:76:0b:90:3e:cd:13:0d:ee:12:aa:2f:0d:13:69:a1:c1:
1b:26:6e:db:c3:63:08:05:48:84:5a:1b:2d:77:e5:6d:d7:bc:
4c:ce:2b:ad:91:a7:dd:1c:f5:68:89:4e:c9:f1:57:52:2d:bb:
c9:23:db:73:d3:c6:9c:72:23:8b:eb:f5:ea:ce:70:57:6a:5f:
4a:aa:c8:33:44:2a:17:31:ec:f8:2b:8a:80:7c:aa:69:a6:96:
95:35:f8:d7:6f:58:05:8d:8a:64:cc:26:b5:66:d3:62:f7:46:
d7:a6:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:38 2025 by rpki-client