Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/92B0DE0EE10811EE8117E548C4F9AE02.roa
File: 92B0DE0EE10811EE8117E548C4F9AE02.roa (raw, json)
Hash identifier: wDrk+dhGgiJhfOdFb1akI2gSuS/qcaw8zjikxQb5Xkk=
Subject key identifier: 74:46:A9:4E:85:EA:06:D9:11:6F:E6:57:1C:E6:F0:EB:10:71:E7:4F
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 01C2
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/92B0DE0EE10811EE8117E548C4F9AE02.roa
Signing time: Fri 31 Jan 2025 02:46:22 +0000
ROA not before: Fri 31 Jan 2025 02:46:22 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 58655
IP address blocks: 103.41.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Jan 31 02:46:22 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c397e-b6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:ea:1a:2a:20:2a:2e:d9:25:a3:ca:00:e0:
89:ec:8e:b5:a6:d5:7c:73:76:2a:db:c7:b7:a5:83:
de:15:64:95:1d:49:0b:40:7f:b0:14:f8:9f:35:d8:
21:c1:ba:55:d2:0f:b7:59:ce:af:d1:15:62:d0:87:
9c:e5:89:c4:ec:e2:54:19:67:a1:8c:f5:6e:59:36:
6c:05:ed:af:5a:72:b8:7f:28:b7:01:62:35:d2:ee:
b4:f3:af:a3:19:04:36:f6:5f:21:32:10:ec:d5:d9:
fe:3d:7e:4f:b0:a3:f5:f5:68:07:0c:a9:f5:c9:c2:
fd:82:43:15:d4:01:f1:ed:31:67:5e:35:49:ba:f2:
60:d8:c8:09:42:59:79:23:d1:b9:c4:64:b6:5b:36:
17:37:d9:e4:0d:00:dc:5b:b6:82:29:09:a8:f6:0a:
b7:af:9a:cb:8c:8b:28:ab:e7:84:16:54:c7:80:66:
ed:57:98:59:74:45:ad:da:34:bc:56:4c:54:33:43:
95:66:60:c5:b4:70:3b:77:27:9d:5a:30:64:cc:62:
07:73:29:df:94:93:d9:4b:c9:07:a2:1e:d5:60:e7:
6a:00:f3:2b:36:dd:2f:98:4d:b6:bf:a4:fc:a4:bc:
59:44:f4:80:c3:47:1a:27:a2:d3:5d:18:b6:66:61:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:A9:4E:85:EA:06:D9:11:6F:E6:57:1C:E6:F0:EB:10:71:E7:4F
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/92B0DE0EE10811EE8117E548C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f2:a1:6a:fb:f0:d5:5d:22:8d:ac:70:45:c8:5d:d7:1e:53:
b6:4a:07:d3:a4:46:e3:42:d0:70:6a:7b:e1:0c:7d:07:45:15:
d2:6e:98:51:68:cc:2e:b2:cc:58:a6:a6:b1:f0:83:10:3a:88:
80:6a:24:5f:c1:b9:4d:7a:ed:f2:ba:65:78:9f:39:56:9e:25:
8c:74:41:63:28:00:fe:fa:d8:ad:7e:0d:38:d7:3c:b8:70:98:
4b:82:fb:4d:44:4b:77:47:2a:21:f1:32:70:4b:dd:4f:f5:83:
21:e3:75:e8:0e:e6:6e:9a:a8:3b:71:cf:3b:32:8e:a8:d0:01:
ee:19:45:2e:fb:9f:b1:bd:13:05:96:ea:59:09:94:e2:68:7f:
d9:7d:9c:aa:df:94:54:3c:fe:64:86:71:fc:e1:b1:88:50:9d:
8d:d0:89:d1:0c:10:a1:77:17:bb:8f:15:9c:d9:70:ad:4c:56:
98:72:25:4e:8b:5f:a6:45:c3:11:e8:9e:c5:6c:56:17:fb:9c:
d2:fb:51:9c:79:0f:d9:c7:f8:c9:da:70:55:1f:c3:28:56:35:
cb:3f:c9:5c:63:d5:20:12:4c:f8:42:2d:bf:b9:7c:8f:5d:4a:
c8:87:ad:20:14:86:63:fc:0e:20:b7:08:93:d9:79:fb:b7:5c:
f0:31:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:09 2025 by rpki-client