Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
File: FF4EB6B2395811ECA422C462C4F9AE02.roa (raw, json)
Hash identifier: kkkJWZ9fDn1htzEtE1zpX7lAAG0cOZUfH1foPNvS114=
Subject key identifier: 00:3E:0D:8A:78:72:6D:29:5E:9C:C8:B3:3C:AA:10:34:81:13:CB:12
Certificate issuer: /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial: 0411
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
Signing time: Thu 19 Sep 2024 00:33:40 +0000
ROA not before: Thu 19 Sep 2024 00:33:40 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141004
IP address blocks: 103.171.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Validity
Not Before: Sep 19 00:33:40 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eb7164-b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:10:24:89:d2:a4:17:c8:4b:d6:15:28:c1:
a1:46:f5:53:f9:71:c6:59:9b:03:64:3c:cb:ab:d2:
cf:f9:d9:2e:af:a4:64:e4:1d:9e:f2:13:ee:73:85:
db:ef:7f:75:bc:f0:2b:44:b3:a9:78:71:6e:03:58:
85:90:dc:ac:87:d1:aa:18:25:6f:87:cf:8f:5b:fb:
a7:8c:32:b3:3a:29:da:54:9d:a4:f5:8b:7b:37:ac:
75:3f:30:59:c4:7a:4d:3c:e3:28:74:03:b3:73:c5:
dc:78:a7:83:5c:b3:96:af:91:ba:26:ae:06:23:3d:
59:a3:65:ff:f1:3c:4d:68:ca:71:a1:23:b3:13:dd:
e3:a5:4b:24:f6:9c:80:79:d4:58:17:e5:df:e5:d8:
91:f0:b3:a8:1c:0b:51:6a:e8:6c:9b:5c:80:73:ae:
b7:8c:18:f3:82:19:55:79:e5:f9:7d:b3:bf:90:69:
86:64:f3:1c:67:04:85:dc:f7:80:ec:2f:bc:42:af:
2c:c9:56:72:6e:25:15:32:ff:ff:1f:8a:c4:dd:a8:
85:48:71:eb:e7:82:f0:48:79:1d:ad:1b:8f:5d:d2:
93:46:49:29:0b:43:ca:59:ea:2f:61:81:a7:98:8b:
11:7e:b4:e3:58:1b:6f:f9:37:e5:99:d9:fa:11:7a:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:0D:8A:78:72:6D:29:5E:9C:C8:B3:3C:AA:10:34:81:13:CB:12
X509v3 Authority Key Identifier:
keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/FF4EB6B2395811ECA422C462C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:78:87:ef:59:a9:46:41:87:f4:66:c0:02:02:1f:1e:20:5d:
03:ab:7c:11:98:74:13:bd:f9:27:59:46:4b:22:32:53:11:7b:
c2:bb:fd:bd:6d:12:97:a2:68:d0:cd:a3:23:39:6f:53:13:74:
59:15:c2:7f:9b:f2:44:a7:af:e0:45:24:e6:67:e3:8a:96:16:
d6:1e:af:1c:00:13:9d:ce:91:a8:d3:75:89:7e:3d:ac:91:0e:
85:eb:ba:e7:be:a1:48:bd:bc:84:bc:5e:d0:19:d1:60:0e:ad:
28:c5:fe:6d:3c:59:28:ae:cc:67:62:b3:d7:3e:a1:48:22:25:
9a:22:6a:25:19:79:f3:45:e0:ab:7f:93:6f:9a:ef:f6:a7:95:
d1:f7:50:fd:c5:e5:80:cb:d6:8d:ee:25:5d:4d:8c:15:33:2a:
47:33:d3:95:be:25:f1:06:ab:1d:fe:b2:84:5d:f0:f7:bb:60:
bd:dc:14:18:a9:69:8e:eb:6f:0c:29:8c:74:24:cd:aa:e1:4a:
f9:b4:e4:e4:34:6c:4e:7a:0f:fd:b3:0a:42:55:3d:cf:6a:63:
5d:6c:54:75:d3:59:9c:60:84:dc:f4:32:c0:e7:c5:b0:c4:58:
6c:78:8a:8a:82:8f:06:4f:c0:e0:ba:bf:f5:73:d7:cb:a9:f4:
b5:b9:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:31 2025 by rpki-client