Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
File: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (raw, json)
Hash identifier: dqRmi+7f3BCSJyYwVKePPtxxrf7fTU7A/wo6R2esOQc=
Subject key identifier: 2B:68:BA:B5:45:C5:5D:3A:32:41:7F:8C:AF:47:37:2D:FF:E7:A8:EB
Certificate issuer: /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial: 02F5
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
Signing time: Wed 01 May 2024 04:06:37 +0000
ROA not before: Wed 01 May 2024 04:06:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138153
IP address blocks: 103.183.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Validity
Not Before: May 1 04:06:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6631bfcc-d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:a4:58:52:ad:c1:54:ba:af:37:5f:46:87:
33:06:b5:59:ff:c5:d6:c2:3b:4a:41:e3:2b:68:19:
d7:86:f2:00:4f:1a:6b:13:74:86:f0:8b:87:6e:ac:
6a:89:a6:1e:c4:b6:c6:cf:2f:2b:32:5d:49:48:80:
7a:0c:5f:71:04:e4:44:68:91:cd:3e:f9:db:52:52:
53:b7:b8:0d:49:c7:9c:6d:1b:c0:b4:67:89:49:bb:
4f:14:c7:96:57:2c:62:5a:fd:ec:e8:b4:26:20:47:
75:da:fa:07:19:06:2d:6d:36:ff:f4:6e:30:f7:85:
49:45:44:1c:ee:27:98:1f:d9:1b:f3:39:b0:eb:2a:
5a:0d:0a:34:58:7e:16:67:de:73:d6:87:a3:58:95:
69:d3:ee:a5:09:a4:46:29:19:dd:97:cb:f5:5c:a1:
2d:6e:23:33:ab:ff:34:24:2c:63:b3:f0:ba:3b:c4:
a4:7e:cc:25:da:f9:1a:4d:04:ff:56:af:e4:f1:18:
c3:05:8e:68:fd:64:14:ff:71:55:85:94:09:96:03:
aa:b4:64:f3:25:cf:c0:e6:8c:d2:98:44:63:72:76:
ae:b2:12:fa:55:2f:4c:3e:88:0a:ec:90:49:0a:2a:
a1:aa:a2:b2:6a:c1:99:15:30:c4:f8:6f:cf:d1:a2:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:BA:B5:45:C5:5D:3A:32:41:7F:8C:AF:47:37:2D:FF:E7:A8:EB
X509v3 Authority Key Identifier:
keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/E7AA9622DAFF11ECA67DA10BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5c:09:c6:3b:67:8b:77:63:4b:9f:67:74:d4:7b:ee:9a:b8:
b0:f6:a1:b2:01:be:00:6a:53:e9:48:78:ea:0d:d6:a0:8e:b1:
10:ef:6a:2b:dc:89:16:87:df:2d:3a:bc:99:7d:3f:d1:df:e5:
1c:d9:a1:73:e6:70:4c:d1:34:52:fe:4d:d5:29:db:0f:00:02:
a2:0b:c7:4b:3e:df:86:d5:a4:ca:6c:80:7b:a8:ca:6b:45:fa:
37:1a:db:9e:65:75:ac:51:a9:7a:cb:62:95:b9:20:96:29:63:
44:1f:3b:83:72:63:70:9b:a5:0f:47:ed:b1:11:c2:da:bf:72:
d3:0f:43:c5:6c:1b:83:3c:b9:0c:1c:48:02:0f:f6:00:de:56:
e6:1e:a0:ce:8c:89:e1:c9:b4:9f:5b:73:b0:38:c1:17:c9:38:
ca:83:28:57:40:25:08:5f:d5:b6:49:48:0a:85:7d:e4:ff:29:
d9:75:60:06:7e:17:38:b2:23:c9:44:2b:3c:2f:a4:2c:48:10:
54:8a:f8:21:7c:08:4f:82:b0:5c:d3:32:47:35:40:48:c8:58:
ae:87:a6:bf:db:6a:30:f4:6c:b0:63:8d:d9:33:a6:20:5b:d5:
7b:e5:3d:97:1b:bc:19:9d:77:e8:ec:31:97:0b:b2:99:78:c4:
a1:ef:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:31 2025 by rpki-client