Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa
File: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (raw, json)
Hash identifier: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=
Subject key identifier: 5D:57:01:62:D3:56:B1:D0:B4:7A:08:40:BF:74:F5:15:7D:D8:74:E7
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0BBB
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa
Signing time: Thu 10 Oct 2024 19:27:35 +0000
ROA not before: Thu 10 Oct 2024 19:27:34 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133547
IP address blocks: 103.100.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Oct 10 19:27:34 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67082aa6-9ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:30:e5:53:c2:37:3c:6a:5e:0e:89:a5:82:06:
1e:ba:79:7d:ac:05:23:6b:84:e3:7b:c8:96:81:ba:
68:bc:bf:ab:46:29:04:aa:e6:9c:24:34:6d:c6:72:
22:a3:60:ac:2c:ce:db:13:da:07:f4:f7:9e:b8:7b:
3f:a2:5b:c3:26:c2:51:ac:ef:ed:8a:e7:8a:6e:2e:
6e:fc:f6:c5:18:52:f0:92:3e:29:34:e0:bf:33:af:
eb:b1:c2:24:76:44:84:33:b1:93:06:0f:95:bc:fa:
29:3c:45:7a:35:1a:08:63:a3:33:1b:57:a2:50:8f:
17:22:a2:a0:d3:ad:10:34:00:c4:45:b5:80:87:90:
a7:a0:a1:de:08:de:95:d4:80:2b:fc:5d:ba:84:db:
e9:ac:cd:16:08:46:8a:59:a7:f1:39:bf:ad:fa:c1:
c2:77:e2:dc:08:bd:1a:c4:02:e1:58:d4:6d:1b:72:
4c:57:de:78:d3:b1:df:ac:1c:91:aa:5b:25:93:21:
2e:68:6d:86:af:73:97:33:f6:89:c1:4c:3b:bc:29:
4a:00:16:a7:61:c0:1a:f8:13:8f:e1:98:eb:92:df:
ee:39:e2:7a:72:49:fc:ca:93:cc:c7:39:8b:df:e8:
8b:39:90:3a:22:6d:76:5e:a9:07:88:53:2f:2b:56:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:57:01:62:D3:56:B1:D0:B4:7A:08:40:BF:74:F5:15:7D:D8:74:E7
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3d:ae:cb:a1:55:b1:e4:c3:59:07:4b:f4:3a:61:a2:0d:ca:
3f:f2:cb:c2:7d:51:33:24:c5:4c:a0:76:cc:ad:46:07:f2:98:
dc:26:3f:d2:c6:89:25:3d:43:32:02:65:2d:c7:7c:04:8a:3f:
b9:47:0d:77:d7:12:02:0c:71:6e:da:e0:e7:ef:2a:3f:2e:ed:
1b:86:b6:1b:2e:9c:9d:01:35:af:b9:7a:37:f2:6c:ec:34:c4:
84:84:e5:24:30:06:b4:15:9f:f4:51:37:97:44:4e:b1:f0:0b:
b3:a2:67:3d:0b:fe:ff:f0:6b:ca:83:ca:56:fb:fa:d3:1e:24:
56:0e:6d:56:57:95:7b:f6:5f:76:a3:1e:09:ef:38:84:3a:80:
b1:ad:3b:d0:9a:66:77:e8:91:78:85:93:fd:e3:f2:b9:da:85:
39:cd:7a:58:bd:6d:e4:c1:95:13:70:79:e5:f3:76:12:99:18:
36:4d:7e:9f:45:64:b7:01:02:22:f0:40:8d:c0:18:56:c1:02:
b2:7c:e6:2a:ae:1e:f7:34:25:56:44:88:f6:6c:eb:17:ad:da:
14:15:41:d3:60:01:84:b5:ac:18:e9:c6:58:c3:a8:cd:1c:ab:
e6:4d:7d:e3:9f:30:9d:b0:c7:50:1c:3e:50:7a:7d:ae:6b:f8:
0a:d3:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:28 2025 by rpki-client