Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
File: C1C6BCEE96CB11EF8176AD43C4F9AE02.roa (raw, json)
Hash identifier: z6WLkH/Jwa5LKXDy3pbmgIhQHaqhnvi5dc9tRR9RE7U=
Subject key identifier: F3:1D:04:16:03:73:AF:76:23:33:A6:43:C8:3C:4A:76:10:FD:B5:4D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 47D3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
Signing time: Wed 30 Oct 2024 14:32:15 +0000
ROA not before: Wed 30 Oct 2024 14:32:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135963
IP address blocks: 103.194.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18387 (0x47d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 30 14:32:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6722436e-929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:1a:d8:77:e2:b1:b3:60:dd:0a:1f:22:cd:
e3:77:7e:ad:2a:04:ce:f2:41:cb:b2:8d:52:09:2f:
4a:17:fd:a0:7b:79:4c:c3:b5:dc:76:10:1a:6a:4f:
16:53:96:d1:2c:05:ec:b4:26:09:a2:5d:64:ab:2a:
66:9e:c6:12:af:91:66:12:83:53:ac:a0:f0:8b:93:
a2:c6:5f:f0:53:52:20:71:8f:10:0a:89:e4:bf:b0:
c7:fb:ed:c7:a1:ce:7d:04:36:6e:d3:36:3f:ca:5a:
5f:d0:fd:a1:64:f0:05:29:dd:13:8d:86:e4:2d:62:
40:6f:1c:67:da:18:72:f2:43:83:ed:bd:77:cd:67:
fe:85:8e:23:bf:48:5b:92:8d:b1:25:53:b8:72:54:
ce:67:d0:d6:77:2e:db:78:bb:79:29:f9:97:5a:56:
e8:fb:61:48:71:15:79:00:e9:85:82:5e:49:1c:74:
02:36:2e:b1:2a:f1:6d:56:79:14:37:10:6d:b3:8d:
39:d8:a4:19:33:97:2d:99:91:6a:32:bb:c3:bc:6b:
bb:3b:3b:c4:db:25:ee:01:f2:3c:51:ea:3e:1a:d3:
d5:2b:9d:02:cd:ba:46:0b:78:c1:73:98:88:06:a2:
59:b7:ed:33:c6:2b:c4:c4:0c:72:d1:8e:6e:1a:92:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:04:16:03:73:AF:76:23:33:A6:43:C8:3C:4A:76:10:FD:B5:4D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:97:6d:2e:72:e1:24:c4:8c:a9:7e:7a:08:2a:75:08:56:f0:
ad:3c:95:99:48:37:6c:fa:bc:9a:2d:e4:86:5b:e6:fe:87:67:
15:37:10:ff:e0:8a:0c:e2:8d:e3:04:cb:eb:84:9b:de:af:cd:
d1:65:33:0d:d2:2a:49:d7:e4:ab:82:62:e0:ef:f7:ba:0e:97:
2d:0c:10:bb:50:94:d6:e8:d6:83:bf:8e:8a:ad:ac:25:d2:a3:
76:78:f3:17:b4:64:ca:8a:33:94:e0:1e:20:d8:ca:f3:40:79:
87:dc:08:14:93:bb:54:e6:bf:c9:c5:41:7e:83:80:90:f1:aa:
d9:29:11:35:0d:20:88:f7:95:42:b1:2a:61:af:f6:89:28:e2:
e4:90:a0:3a:fd:a8:56:d7:d3:ab:fa:ba:0c:19:5b:f5:bb:12:
f0:14:cc:15:36:d6:36:bb:e8:bf:07:c9:97:8e:67:85:4e:d0:
be:52:a4:6f:f2:32:b0:8e:4a:57:b9:e7:21:25:a4:6b:17:81:
73:21:50:86:95:9c:49:5d:c5:f1:76:27:13:4b:b6:e6:3a:3b:
87:14:18:fc:84:69:73:9e:43:6a:81:a7:86:bd:d7:1c:fc:fd:
3a:13:58:57:f0:a4:1b:98:2b:b1:c8:45:9b:ba:e5:d3:1a:bc:
e0:0d:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:03:58 2025 by rpki-client