Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa
File: A147B9B48CCD11ED93B2703DC4F9AE02.roa (raw, json)
Hash identifier: LjR2J6s61ptbuPzJEAy+lrcPJ0two3y2/9CI9EYqoC0=
Subject key identifier: 8F:9B:7F:12:8B:62:0F:34:8F:F6:CA:23:B7:27:07:AF:49:B7:25:9A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 45E0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:34:19 +0000
ROA not before: Thu 05 Sep 2024 03:34:19 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149161
IP address blocks: 103.60.242.0/23 maxlen: 24
103.139.102.0/23 maxlen: 24
2400:cfe0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17888 (0x45e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:34:19 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d926bb-af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:88:ce:e9:4a:dc:a7:4d:9d:d6:b7:b4:c3:
c8:ef:72:21:3a:0c:ad:73:e6:dc:36:d2:ae:d2:3a:
51:0b:e2:ee:1c:40:fb:ab:0c:a7:60:b6:47:69:62:
26:b8:38:1b:a1:49:b4:2b:09:ef:bf:66:25:06:e5:
de:f7:53:6e:f9:ba:ad:5f:fd:11:77:20:39:76:1a:
94:9f:7c:5d:e0:de:34:20:17:80:dc:ff:10:97:47:
4e:b6:89:9e:42:34:38:15:39:3a:01:df:42:11:ac:
50:72:bb:41:1e:c1:a3:a4:27:f6:b1:91:34:7b:b2:
97:79:f4:40:fb:b6:ec:aa:67:c3:b0:12:7d:a2:38:
4c:65:a1:f0:ac:94:05:89:fd:90:cf:58:20:54:a3:
2b:f7:cc:b6:81:72:fd:a6:e5:3c:54:ff:1c:23:cc:
21:d8:13:25:c7:72:0d:61:ce:b3:7b:fe:61:d4:91:
d8:2e:b5:d6:32:86:8f:3e:4b:3a:8d:7b:0a:08:02:
d9:5d:38:98:9f:1a:d7:47:19:78:60:22:03:11:5c:
b4:7c:da:5a:9e:2f:b5:30:56:fd:e5:2a:ba:d6:dd:
6a:5b:27:67:20:02:97:b7:1c:8d:9e:7b:f2:cd:15:
5d:a1:be:f7:73:51:1c:3f:02:2e:b8:40:f5:60:40:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:7F:12:8B:62:0F:34:8F:F6:CA:23:B7:27:07:AF:49:B7:25:9A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.242.0/23
103.139.102.0/23
IPv6:
2400:cfe0::/48
Signature Algorithm: sha256WithRSAEncryption
37:0a:33:83:4f:d0:ef:50:f3:6f:f7:0f:de:cf:e8:57:72:1d:
76:e3:4f:e8:7e:a1:a4:46:c0:51:ff:dc:fe:d6:34:7a:8a:34:
d7:64:d4:80:af:7e:d7:92:30:26:03:01:0b:ed:63:51:0c:f0:
14:68:5e:1f:bf:5c:01:db:29:7e:fa:f3:6b:52:a5:a5:14:69:
63:fb:0d:9d:51:77:3f:cc:4a:0f:f9:7a:fb:3a:18:b9:53:f7:
3e:89:73:fd:66:86:33:e0:e0:55:0f:9c:3b:4e:08:a5:aa:1b:
25:b2:a6:79:72:aa:87:b0:d9:d7:c7:08:79:df:e5:c6:ea:90:
75:f9:46:3e:a4:97:ad:d2:7b:9a:93:4c:95:a3:1e:63:8e:ba:
87:07:ce:aa:cc:e1:13:8e:a1:6a:a2:47:e8:5f:20:71:a2:9b:
6b:7b:82:c5:1a:f0:e3:cf:5c:3a:57:df:47:d8:ac:78:e3:b4:
7f:f8:5f:00:ab:98:ac:41:46:65:eb:07:4b:f5:3b:f3:c3:77:
5f:d0:bd:f7:48:e3:7c:46:cc:80:2e:51:74:d1:e6:c0:b3:3b:
9a:e4:d0:7b:ce:a0:08:9f:1c:1e:c7:a9:85:b4:8e:a7:d3:02:
2a:f1:fd:08:5d:e1:ab:84:16:37:da:f7:98:56:23:39:54:db:
0d:5d:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:44 2025 by rpki-client