Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BDDB7E86B0211ED849E0957C4F9AE02.roa
File: 1BDDB7E86B0211ED849E0957C4F9AE02.roa (raw, json)
Hash identifier: NMbLgLzKiSgnq2c6nEXuZn8AVpz1c3rJDG+7Xr/LMsQ=
Subject key identifier: 13:23:42:50:4F:44:5E:4B:6F:5B:EE:4A:2F:A5:0E:41:A2:FF:67:40
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 45DE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BDDB7E86B0211ED849E0957C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:34:17 +0000
ROA not before: Thu 05 Sep 2024 03:34:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149151
IP address blocks: 103.38.246.0/23 maxlen: 24
2400:c1a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17886 (0x45de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:34:17 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d926b9-4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:5e:5e:b6:ae:61:52:d2:9d:68:9e:a5:f9:
86:d9:71:08:f9:ec:d5:9d:95:89:41:a7:b3:d6:fc:
af:98:4f:ce:3b:d5:c6:41:19:5c:ba:69:39:9f:90:
c0:e4:4a:ec:3b:63:ee:10:cb:da:e5:15:07:5b:a2:
62:a0:96:94:9c:c2:92:93:29:90:e2:a3:d0:28:66:
49:ad:69:4b:7c:b3:ed:98:ec:f4:00:9f:09:bf:ba:
45:38:57:78:69:ee:73:78:e2:cf:ca:f6:a2:3f:ef:
43:89:48:57:0c:32:8c:36:d5:ab:29:0f:3c:62:5e:
67:06:fc:cd:df:33:89:4d:12:b4:67:83:b3:e2:02:
42:3a:2c:79:c3:bb:14:63:bc:be:98:89:2e:e5:54:
2f:82:73:79:23:d0:84:c7:5a:9e:8f:fa:a0:da:bb:
a9:65:39:f7:ca:67:e9:f0:3d:18:d9:49:91:d4:7f:
6a:b5:c1:57:e2:1c:18:27:47:e0:89:48:2b:dc:54:
c0:42:cd:2a:43:98:0a:e0:98:42:da:d8:4f:31:cd:
15:30:98:0f:28:c6:13:da:a5:41:8b:b2:f1:e8:bc:
be:29:25:e7:ec:77:d6:b1:55:1a:a5:cd:1f:10:13:
3f:88:70:8f:4e:9a:a3:4c:08:44:28:4c:69:03:f9:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:42:50:4F:44:5E:4B:6F:5B:EE:4A:2F:A5:0E:41:A2:FF:67:40
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BDDB7E86B0211ED849E0957C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.246.0/23
IPv6:
2400:c1a0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:d1:a1:be:5d:0f:0e:c8:ee:c5:26:9c:5b:46:39:aa:e8:71:
13:1b:6b:32:5a:45:4c:72:7d:a7:31:9a:b1:0c:75:a5:43:a8:
ed:1f:89:5c:b3:21:04:3a:8b:be:7e:17:c5:6d:f1:78:55:ee:
67:db:99:b6:77:c9:b5:d8:ed:89:0d:41:b1:b6:3b:fb:06:e2:
4e:11:e7:91:e3:a3:1b:db:01:d3:a9:4f:6f:00:fe:33:e3:df:
07:de:5b:2c:b9:ea:05:74:c1:19:28:9c:32:fc:38:4a:96:07:
94:f3:08:b0:c1:36:86:ee:1d:e9:67:97:d1:c6:d4:f5:73:b3:
4c:05:9d:2c:3e:08:e0:2d:34:c7:dc:0b:13:5c:cc:66:1c:19:
8b:46:ba:f5:95:02:84:b0:3d:11:db:29:27:2f:5f:62:d2:85:
d9:37:36:40:4d:63:5c:e9:a0:df:95:2a:90:4e:17:40:0d:ee:
27:f9:56:79:a4:52:59:c5:69:3b:b9:d9:d4:08:1f:51:8a:d9:
12:2a:a2:3e:6b:f8:bc:62:18:22:e8:c9:49:0f:d6:de:e0:7f:
ac:74:9a:60:89:53:b8:f5:a4:3e:55:5c:09:8e:1b:05:48:c4:
4d:1b:14:9a:dc:75:d5:57:bd:4e:4f:76:29:6d:15:ae:9a:3b:
81:33:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:25 2025 by rpki-client