Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa
File: 3DB1456CD86A11ED8C149E7DC4F9AE02.roa (raw, json)
Hash identifier: QdhdSADAYJp863h0I6QY4SELmIkHRJFIgIwv1G8PTqQ=
Subject key identifier: C8:DF:58:4F:0F:09:82:D3:14:2E:EA:1B:88:5F:6A:C3:A8:5A:8E:76
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 454C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:09 +0000
ROA not before: Thu 05 Sep 2024 03:32:09 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131409
IP address blocks: 103.149.254.0/23 maxlen: 24
2406:23c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17740 (0x454c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:09 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92639-66aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:54:84:65:f7:67:4a:94:1c:46:8b:8f:87:
f7:a1:73:18:5a:ca:33:94:f0:e8:ca:ed:9f:3e:71:
11:0f:fa:98:9a:26:da:25:09:9e:c4:5c:29:4c:29:
1a:c2:46:53:c4:20:fa:63:67:ed:64:c8:98:f7:ee:
8b:b6:81:25:11:b9:ab:0e:68:f5:d1:74:0d:fb:6f:
76:3d:7d:70:0a:5d:88:bd:d4:0d:15:ad:56:b4:62:
a5:07:9d:85:14:af:0c:af:54:44:09:5c:56:86:84:
eb:02:71:0b:ec:00:a7:ae:29:0f:e4:ff:ae:80:5c:
20:9c:92:00:8f:1f:af:13:30:be:da:a5:9f:b0:c4:
7b:ab:c1:dd:87:41:84:3c:f9:90:cf:3d:9d:c0:6c:
8f:ac:46:ed:f1:fc:d8:3b:e3:e0:82:ab:19:f9:89:
e1:84:2c:d3:c2:61:76:cb:ea:c0:73:96:17:c7:7a:
3a:f7:55:3e:02:fa:2f:4a:43:d0:00:af:6c:26:8d:
cd:bb:a7:03:be:5f:c1:5a:3f:14:67:12:2f:6d:4e:
65:32:7d:33:10:d0:d2:df:27:d2:d1:56:5d:53:b2:
a7:36:98:87:e7:bd:aa:61:01:26:0c:4d:f3:36:4e:
22:b3:66:a2:59:3a:73:4b:da:58:f1:38:7d:73:61:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:58:4F:0F:09:82:D3:14:2E:EA:1B:88:5F:6A:C3:A8:5A:8E:76
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3DB1456CD86A11ED8C149E7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.254.0/23
IPv6:
2406:23c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:63:69:7c:06:62:cc:cc:f1:2f:32:10:02:a2:bf:22:41:85:
c8:5c:d3:86:2e:ba:54:b8:9a:c7:03:ce:fd:60:a8:0c:52:15:
9d:f4:b6:4d:e1:83:82:bc:af:c1:9c:69:07:b3:df:dd:4e:96:
15:2e:55:8e:ac:10:d8:62:ad:3b:7a:4b:74:c8:02:0c:e6:44:
a6:43:25:1a:29:ec:71:35:4f:b0:93:5c:9f:ce:60:4f:12:02:
6f:6a:ab:d7:e7:21:62:3a:f8:07:ac:da:ae:39:da:d2:7c:2e:
fb:0e:46:b8:60:d8:ca:e5:95:6f:81:12:c0:fb:c4:d4:f5:50:
41:12:53:89:f0:94:41:42:cd:5f:ad:da:92:c3:da:bc:17:75:
d1:1f:8c:2f:97:df:63:94:3d:e8:86:a3:2d:99:30:86:d5:73:
65:d4:52:32:e5:6b:9a:1c:7c:f3:9c:35:d3:11:fc:e6:f1:d7:
df:6f:be:e2:10:9f:be:cd:45:24:9e:af:8a:af:d2:00:4f:60:
f4:c9:d1:65:5d:3f:08:dd:d4:e8:2d:4f:33:3b:a8:56:89:34:
0a:bc:eb:f7:93:fa:ae:47:37:48:92:33:1f:45:db:27:f9:26:
63:f9:70:19:7f:3a:e9:b6:93:a8:21:51:93:49:58:c6:ae:66:
b8:db:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:35 2025 by rpki-client