Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa
File: 691C2F48169211EFBBB5BD6CC4F9AE02.roa (raw, json)
Hash identifier: JFnoGlMQvx0rfghWguqYEQOafVm5KcUTywblwtb1T0Y=
Subject key identifier: D0:3F:60:19:50:92:AF:A5:37:2E:6D:05:2B:22:45:76:EF:A6:82:67
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 05
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa
Signing time: Mon 20 May 2024 10:19:16 +0000
ROA not before: Mon 20 May 2024 10:19:16 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132384
IP address blocks: 103.76.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: May 20 10:19:16 2024 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=664b23a3-076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:1e:b7:cd:c1:6b:fa:54:6c:75:d2:77:1f:
db:85:14:7d:12:07:89:bd:0b:6a:c8:36:af:b5:5f:
29:dc:44:4a:30:4e:e6:29:3b:33:c7:6e:49:f2:58:
0d:9a:aa:40:c9:86:b3:5f:7f:1e:56:d8:1c:b8:19:
8e:2c:ce:4b:97:f6:e1:03:e6:bd:21:d5:30:e5:77:
e8:f9:cd:ff:a1:3f:0a:cf:88:e1:7e:4d:f9:56:11:
3b:65:6d:3b:bd:a6:9b:fd:79:f2:0f:dc:bf:35:d1:
d3:c4:8a:8e:fb:b1:b4:3f:8c:ca:d5:c4:0e:68:65:
1f:de:ae:a6:fd:73:d1:a9:29:5c:8c:73:c3:dc:aa:
14:32:23:2c:76:bd:37:80:51:0d:20:4e:90:d7:2e:
2e:94:20:12:c7:07:d5:28:10:59:64:6b:27:0e:63:
2b:c4:65:2b:c7:8e:56:3e:87:d3:17:9a:86:67:09:
4b:52:c5:56:84:fc:1c:f8:b9:f5:a3:b3:e3:d6:ff:
76:6d:ea:1a:3c:1b:5e:f0:20:79:5c:7b:46:6a:53:
4b:46:4a:e5:52:59:10:86:ed:f3:da:4d:69:46:be:
fe:33:b5:00:a2:42:ab:3f:f4:db:f3:96:50:af:11:
74:56:1d:0d:3b:88:4d:12:8b:57:3e:bb:26:26:e7:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:60:19:50:92:AF:A5:37:2E:6D:05:2B:22:45:76:EF:A6:82:67
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/691C2F48169211EFBBB5BD6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:88:f5:a8:ed:96:20:93:9d:8a:30:97:bd:df:ec:a2:40:bb:
ce:c9:09:8d:b0:6f:11:91:f4:77:b2:05:07:af:24:d4:8b:f5:
7b:13:34:a2:cc:6d:a8:8d:d6:1a:73:72:1e:81:66:17:04:6a:
e2:bd:cd:40:a3:cd:d1:57:27:ce:4a:0a:5f:22:eb:fe:c5:7d:
9b:55:b2:92:cd:c7:37:d3:1b:8c:ba:90:2e:56:06:cf:f7:c2:
84:13:aa:4b:ee:b1:f5:83:06:20:d9:49:b0:d8:8d:b9:67:ed:
8f:b2:e8:ca:6d:fe:a0:92:b8:44:a8:6e:38:86:78:30:95:e7:
b7:f4:c6:d1:27:e6:b7:a5:35:ec:ca:1c:f4:c3:ac:06:3f:31:
12:13:53:ce:0b:62:93:a2:e1:2e:dd:57:2a:0a:be:e9:04:74:
89:32:02:a1:79:14:63:9f:2f:2b:7a:78:43:0c:64:9e:7b:e9:
fc:e0:ed:85:e0:b7:63:e3:81:f1:4b:08:21:d7:fa:6a:a9:0d:
55:24:a8:ea:9b:de:6a:f3:3a:92:cf:27:0d:89:63:7e:a1:ae:
99:4f:4c:52:04:73:30:8f:96:97:bc:8a:9b:63:85:8c:d1:ba:
96:b5:dc:0f:22:a8:34:f2:b1:7f:52:31:39:86:25:ba:25:1f:
98:99:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:35 2025 by rpki-client