Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
File: 594ECE96804011EA9B73BC62C4F9AE02.roa (raw, json)
Hash identifier: bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=
Subject key identifier: FA:45:90:F4:AC:D8:24:AF:6E:52:0B:4B:32:E1:97:15:CF:90:2C:85
Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial: 08D8
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
Signing time: Tue 06 Feb 2024 21:18:48 +0000
ROA not before: Tue 06 Feb 2024 21:18:48 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 63950
IP address blocks: 103.49.16.0/23 maxlen: 24
2001:df2:3c00::/45 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Validity
Not Before: Feb 6 21:18:48 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c2a237-9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:75:f9:70:d4:a6:74:31:50:aa:c4:ef:00:
84:65:d6:ae:a6:78:19:59:d4:0a:53:e8:4f:66:c1:
27:7d:28:c9:47:9f:01:2c:8b:6b:7b:a2:4a:be:c2:
4d:44:93:9d:31:71:41:6a:de:0a:8d:9a:86:45:e6:
aa:c8:a8:ab:f8:41:dc:81:7d:d0:83:07:51:e7:d4:
bc:12:cb:d9:37:6b:b0:57:23:a0:c8:6c:7c:62:12:
0b:1d:d7:58:cf:1f:2e:b2:5a:67:2b:c2:36:6e:f2:
85:d9:52:8b:de:13:e1:9d:16:03:95:1d:b3:fd:a8:
cf:b6:2a:2f:46:08:9a:47:41:a1:a6:ac:82:fe:ec:
2f:49:b9:5d:e3:cc:ee:a5:6e:1a:ad:a3:f6:47:bb:
78:74:ad:43:cb:1f:da:59:c5:c6:ad:8f:41:41:21:
ef:04:62:52:62:d9:01:06:b6:a0:68:a5:3c:15:11:
f5:da:96:08:33:46:72:a6:80:e1:8f:bb:23:de:b7:
f2:47:54:86:16:15:19:c8:1b:f2:9b:c4:0b:28:89:
19:e2:fd:f6:d9:b1:62:03:bb:4b:ca:31:ed:43:f8:
f2:4e:8c:68:ae:87:d8:92:48:dd:fd:30:fb:0e:f8:
f4:0b:cf:c7:71:34:ae:90:7d:55:24:fa:81:3a:4c:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:90:F4:AC:D8:24:AF:6E:52:0B:4B:32:E1:97:15:CF:90:2C:85
X509v3 Authority Key Identifier:
keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/594ECE96804011EA9B73BC62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.16.0/23
IPv6:
2001:df2:3c00::/45
Signature Algorithm: sha256WithRSAEncryption
b9:b1:48:93:b7:5c:0a:99:2e:f9:3b:b7:b7:a6:7c:7d:c1:4c:
ec:f1:26:10:f4:46:e4:34:27:41:7f:cd:bf:90:d0:3c:94:39:
be:62:dc:04:ad:66:9f:52:5a:f7:a4:59:81:80:64:b1:fe:ed:
79:17:b4:58:03:15:f7:0c:b8:11:94:e4:aa:51:69:98:ed:9d:
2c:a2:ec:eb:b8:64:24:c6:d0:51:bc:cd:fb:2c:e4:04:46:88:
10:26:b1:d2:83:0f:56:3c:c1:ad:f9:e8:49:f5:84:a2:74:f8:
9e:3c:a1:a3:06:51:41:3d:a3:d5:19:65:1f:a1:10:3a:0a:73:
3b:0b:fb:e1:e0:d1:5b:ad:f4:4d:0f:0b:98:2d:ae:a7:b6:fd:
7b:72:24:50:83:c6:a2:57:bd:4e:07:c3:c8:ea:d0:cd:f6:bd:
de:6b:e0:5c:76:03:e3:27:04:6e:dc:60:e8:f4:05:bc:72:3f:
6e:e0:18:7c:98:fd:6c:27:90:da:8c:e5:e6:36:41:c7:aa:a5:
07:dd:03:71:6b:ea:b5:b6:f9:5a:5f:8b:95:64:25:5e:3c:12:
2f:ad:c3:41:37:f6:8e:c4:a9:93:1f:0d:60:a5:8d:70:a0:3a:
64:ad:a7:2e:c3:a9:13:6a:2d:77:8c:a2:94:6f:89:fe:ea:c7:
81:20:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:32:14 2025 by rpki-client