Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
File: 6569BF24997F11ECA6C7F481C4F9AE02.roa (raw, json)
Hash identifier: ihZ46zaKKgYFbsQZJpUcfwGNcLq0WYivOzEHAfXlcfs=
Subject key identifier: 8A:C0:6F:F1:F0:6C:AF:D2:08:78:52:AE:1D:BD:B5:44:01:00:18:61
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 093D
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
Signing time: Tue 22 Oct 2024 20:29:33 +0000
ROA not before: Tue 22 Oct 2024 20:29:33 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139009
IP address blocks: 103.74.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Oct 22 20:29:33 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67180b2d-0cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:5f:94:27:57:b6:94:b6:b7:e0:b5:0a:f8:
80:32:01:00:69:97:23:9d:37:32:a6:5b:fe:97:0c:
2d:1a:22:01:24:35:f7:ef:17:02:86:10:a0:60:fa:
cc:6c:ec:77:34:c4:3b:6f:4d:9b:00:b3:df:a4:7d:
5c:15:b8:2e:1c:8d:26:cd:8a:39:bb:ad:db:75:a8:
5a:c8:fc:af:69:7a:ab:5e:93:10:cc:fb:e0:59:98:
8e:8d:e9:57:2f:c3:15:cf:1c:e1:f8:9a:a0:3c:bf:
5f:b2:e2:6f:8d:3e:f1:ff:17:6e:5d:ad:0e:4f:90:
f4:9c:68:84:f9:eb:4d:02:88:49:a9:63:ad:e1:ed:
4d:10:94:7e:cf:bb:6f:2c:5c:2c:5c:5d:51:44:ff:
80:98:df:54:69:b1:1d:8a:0f:bc:d2:19:e3:a4:a5:
eb:3e:b3:67:a8:19:8f:af:a0:8e:dc:6e:72:4b:14:
ba:08:a5:c2:b2:ca:18:9e:9c:79:2f:43:e1:ad:d5:
c0:72:26:50:13:62:a4:c3:b0:36:a6:7f:5f:03:5a:
e9:bc:2e:f6:23:d5:ac:15:51:cf:0e:4e:f9:c5:09:
98:c3:ad:ac:1c:f7:9a:82:14:00:d8:0f:94:fd:9d:
e1:3b:65:84:97:2d:65:ae:03:15:80:98:ba:91:86:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:6F:F1:F0:6C:AF:D2:08:78:52:AE:1D:BD:B5:44:01:00:18:61
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/6569BF24997F11ECA6C7F481C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
19:59:4a:fc:ea:8a:d3:e6:bd:ba:4b:82:f0:32:e4:19:29:b8:
30:f9:8c:e1:6e:37:98:72:80:c7:48:f1:47:2c:e2:06:14:83:
fe:28:13:26:9d:ba:3c:c4:65:b8:90:38:c0:5e:ec:01:33:da:
90:bd:5f:8b:85:1c:08:32:14:95:da:25:25:1d:6c:67:a0:6f:
51:09:0b:24:83:b1:d2:59:98:03:af:be:9d:0b:70:b7:d8:a9:
a4:41:db:1b:05:8d:e4:c7:cf:8f:75:f2:c2:3f:19:0e:35:3d:
69:98:d9:d4:d9:45:55:12:88:ac:d7:98:22:71:94:f8:c5:24:
7a:08:56:68:09:b0:55:af:d9:88:bb:69:fd:84:5c:43:35:f5:
56:6d:f3:6e:7f:b3:bf:76:1c:76:97:1b:86:dd:8d:b2:16:d0:
3d:32:d3:6e:26:25:59:1f:27:86:6d:bc:4c:38:71:33:0e:e5:
84:0b:f7:3d:fa:cb:23:3d:d2:85:7b:db:6e:57:05:79:b2:3a:
d5:75:6d:f2:f3:36:65:34:e2:10:ff:51:5f:c6:7d:ef:db:43:
9d:1c:68:72:b0:75:42:d3:e3:d2:dd:a2:f0:4e:4a:c3:33:2e:
c1:1d:b9:34:78:88:9d:c1:b2:ad:95:e8:c7:38:88:7e:27:28:
25:4b:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:13 2025 by rpki-client