Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
File: 94D84328C2BE11EFA78A383CC4F9AE02.roa (raw, json)
Hash identifier: ILedb+K4luFgP1u+0Lt3UnlTE9tN7xoj1804tP59xoo=
Subject key identifier: 9A:58:74:F8:69:F0:D2:62:B5:A5:25:7B:B1:81:13:A7:26:C8:32:3E
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 064C
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
Signing time: Wed 25 Dec 2024 12:49:13 +0000
ROA not before: Wed 25 Dec 2024 12:49:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 149304
IP address blocks: 103.151.4.0/23 maxlen: 23
103.151.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Validity
Not Before: Dec 25 12:49:13 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676bff49-9b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:22:a1:d7:49:93:1a:e4:a3:1d:74:e3:e6:
74:8a:24:c8:e9:d3:39:73:9c:34:15:7b:15:bc:8a:
5b:e5:1b:b0:74:f7:3f:1c:e1:4d:92:45:83:73:17:
d0:2e:91:f8:de:93:88:0b:e9:76:cc:1b:37:d2:10:
f4:3a:ef:91:d6:e4:af:1b:6e:3c:06:25:6b:5f:55:
3c:9a:1d:cd:9a:52:58:7a:27:77:db:d6:42:38:61:
ae:ea:fd:57:0b:b0:63:8d:30:f7:7f:f0:3a:af:da:
02:b8:4a:46:88:3b:4b:32:24:97:03:2f:a4:71:6d:
b5:6c:be:f6:b6:b3:cf:aa:e9:48:a9:e4:59:bc:44:
31:5e:c1:cf:0a:6b:cc:fe:54:13:ca:08:6b:e0:27:
04:a9:1a:aa:ef:07:45:2b:2d:88:46:3e:ac:cc:4e:
59:a4:0e:c5:04:33:6c:3e:25:74:91:9f:a5:7c:5e:
b1:68:e1:08:35:2c:15:91:27:5b:c6:d9:51:78:96:
d5:a4:4a:14:53:b1:94:46:5f:09:5c:68:61:da:8b:
e1:60:92:96:b0:f5:22:f8:bf:99:18:bb:b8:d0:22:
d0:7b:db:7f:1c:97:3e:d1:26:fb:03:b6:73:e4:6a:
cf:c3:4d:d5:d6:1e:27:e3:30:d0:70:c3:fa:71:8c:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:74:F8:69:F0:D2:62:B5:A5:25:7B:B1:81:13:A7:26:C8:32:3E
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/23
Signature Algorithm: sha256WithRSAEncryption
df:84:65:05:44:98:0e:85:90:21:ea:ee:20:2f:fd:5b:c0:39:
bd:bb:5b:83:51:cb:78:69:dc:52:fd:af:6a:11:28:80:13:a9:
70:67:1e:28:c2:93:c2:67:85:7c:cc:77:61:f1:b1:24:e3:9d:
93:ef:64:cf:66:8b:77:a9:7d:be:33:a4:7f:b3:a2:ea:20:6f:
b8:b1:9e:85:d7:f0:4c:7d:dc:c2:55:38:4a:ff:b1:b4:24:f5:
f7:0f:af:81:b0:e8:61:8f:f5:ba:94:64:56:51:e2:99:30:55:
9a:ec:91:b2:71:57:af:1f:ef:6b:fd:fb:6a:ef:76:83:98:70:
05:d8:9c:5f:b7:4a:95:1e:07:8c:23:7d:7c:99:63:bc:8f:20:
e0:c2:dc:24:b1:74:73:2f:6d:6b:5e:1f:d0:c3:a6:a9:3d:d9:
67:4c:75:eb:33:11:c2:a3:43:14:39:79:57:0a:b1:c9:d3:0c:
a7:24:16:fe:62:4a:79:c8:30:f5:26:30:dc:5b:50:43:67:c9:
ce:8a:72:75:9b:e0:87:13:07:08:f8:e9:fe:84:c4:21:9f:49:
8c:a7:12:74:f8:c8:f5:b6:0b:ba:5f:b5:d3:86:ef:9c:37:64:
cb:33:bb:31:ef:fe:b0:39:ec:73:6e:74:19:b5:1e:44:e7:7f:
09:0c:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:45 2025 by rpki-client