Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
File: AD286018B29C11EDB216812EC4F9AE02.roa (raw, json)
Hash identifier: VONiHwejXacpBeR7rVkbydMQIhwSgiZRwegZVDVvf5E=
Subject key identifier: DA:C9:A6:6D:BF:E4:46:CE:0B:87:8E:72:F9:9F:86:F8:B8:0F:28:9F
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: E4
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
Signing time: Fri 19 Apr 2024 06:08:28 +0000
ROA not before: Fri 19 Apr 2024 06:08:28 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 147314
IP address blocks: 103.89.240.0/23 maxlen: 23
103.89.240.0/24 maxlen: 24
103.89.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Apr 19 06:08:28 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66220a5b-3220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:75:02:51:78:27:1f:cb:92:f0:e2:f1:89:
ea:60:97:1f:7f:49:42:fa:69:07:a0:0f:36:87:b5:
20:9d:eb:0e:24:bc:af:b0:9e:98:b8:2f:74:b4:1e:
18:43:04:ca:6a:dd:b4:f0:f3:cc:a6:c5:a0:b5:2f:
46:ad:f3:28:7c:ac:87:ac:47:fd:43:ff:d8:50:a9:
bd:d2:f0:0c:fa:6c:84:9c:61:47:dc:20:7d:cb:ba:
3e:12:fb:53:78:7e:dd:52:bc:23:26:e2:a1:3c:60:
29:d3:b9:a2:84:81:a3:70:bd:5e:3b:0e:b3:25:e2:
c1:ba:89:86:dc:a1:2f:5f:5f:2a:16:ad:c5:8f:25:
76:47:b9:29:15:dc:fe:92:01:52:d9:50:4b:d1:84:
2a:f5:34:d7:64:e3:e0:f0:73:a2:eb:a3:9a:ac:a0:
41:01:2a:37:98:2c:cd:4c:81:69:c1:5b:b5:9d:de:
32:f3:3f:b9:f0:60:65:a2:12:f8:1a:77:57:d1:a6:
93:69:e3:6e:74:2b:d4:6c:2b:0b:12:2a:8d:d2:3d:
e3:d1:48:d6:81:c8:86:70:fd:ae:1c:fc:bb:8a:9d:
d5:c2:5c:87:ed:12:94:1c:2d:ee:e3:55:24:51:d4:
69:3f:42:37:f5:94:f3:68:b7:46:64:a4:95:b1:d9:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:A6:6D:BF:E4:46:CE:0B:87:8E:72:F9:9F:86:F8:B8:0F:28:9F
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/AD286018B29C11EDB216812EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.240.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c4:66:9a:e1:4d:42:3d:88:f6:bc:0c:06:d3:35:72:83:50:
2c:22:99:9d:87:3c:73:f6:0f:a7:09:32:88:d9:31:28:22:4a:
b2:60:e7:fe:8c:a8:08:5e:ba:81:65:9e:a6:01:db:e7:89:0f:
80:13:4b:82:2f:61:09:a2:0f:0d:57:f8:89:5e:fa:af:e4:41:
e5:a4:76:e7:89:db:83:99:1a:97:53:e5:79:12:f7:ac:2c:2f:
77:07:0a:b4:b7:18:48:f4:a3:eb:45:ee:16:45:8c:21:f2:ce:
43:73:84:aa:29:ab:69:35:88:03:94:e4:75:d9:2a:68:25:32:
fe:63:12:ea:b2:76:e5:d4:77:82:9e:c4:e3:a0:a3:12:f0:a2:
06:6c:5a:1d:80:f1:44:19:66:0d:54:10:8d:1e:fd:33:52:4e:
2b:32:8b:c3:3b:6c:df:7e:f9:eb:12:44:a8:6b:a3:d2:c1:63:
03:2e:64:2b:9d:b7:d9:6a:44:05:56:42:0c:fb:c9:0e:20:2a:
20:3f:c2:c4:18:29:bf:fa:40:bf:5c:d8:27:74:3a:5b:ed:93:
8b:c2:91:99:17:b3:d4:8a:80:c7:58:94:ab:15:a2:2b:f4:59:
a5:42:1c:52:32:ef:94:1e:61:04:87:52:65:18:a0:2a:38:84:
7a:44:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:37 2025 by rpki-client