Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
File: FAA525207A4411EB804B7430C4F9AE02.roa (raw, json)
Hash identifier: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=
Subject key identifier: DD:28:33:42:DD:40:1B:C5:5D:7C:F3:3C:18:29:84:40:8A:75:43:FF
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 06E1
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
Signing time: Fri 30 Aug 2024 23:31:34 +0000
ROA not before: Fri 30 Aug 2024 23:31:34 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 132825
IP address blocks: 103.153.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Aug 30 23:31:34 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d25655-b2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:9a:ec:57:f7:cc:3c:3d:5d:1c:72:db:77:
fb:2c:35:bf:5f:27:cf:40:84:01:79:74:4a:94:a3:
d9:bb:a9:be:f2:c1:ec:43:60:09:2b:86:d1:2f:06:
c2:1e:37:fa:d8:86:b7:4a:c7:05:b8:f6:c5:d9:f7:
5e:52:94:d7:83:94:e2:e7:76:52:be:ce:42:04:25:
41:67:7c:95:d8:3e:39:4f:49:38:a5:5a:9f:5a:83:
ad:75:a0:42:a8:f4:79:9b:85:81:0f:a1:e3:42:d3:
e2:62:c6:41:20:35:7f:9a:49:c6:4f:ba:bf:31:48:
15:56:7f:b3:37:8f:60:42:73:ad:cb:b9:e9:0d:e5:
61:7d:a6:48:ac:01:4b:cb:e6:2b:26:2c:b7:af:e0:
f8:c1:9a:67:5a:90:89:5a:ec:a7:aa:80:76:b5:99:
7c:8d:91:df:00:93:b5:62:ef:2d:15:bc:62:d2:2d:
c8:24:1f:e9:40:92:f2:3b:7f:21:47:31:ac:47:c4:
97:d2:9c:45:41:0e:e3:70:1a:6e:06:29:9e:ad:a5:
c5:fd:4a:3c:3a:c9:ef:bd:bc:07:54:6b:20:cb:35:
c1:5a:6d:2e:7c:71:4a:dd:40:d3:e6:f2:66:aa:95:
bd:2b:99:f8:b2:e1:6d:c7:5c:f6:83:9b:e5:1b:ad:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:33:42:DD:40:1B:C5:5D:7C:F3:3C:18:29:84:40:8A:75:43:FF
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/FAA525207A4411EB804B7430C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.100.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:10:f2:a2:59:e8:4f:2d:b9:99:88:e6:ff:19:41:f4:55:be:
ca:9a:fd:f5:fc:70:1a:02:c1:fe:e6:2c:8d:57:1d:6e:5f:83:
cc:42:65:4b:15:c9:57:ed:5a:e4:06:f7:70:86:dd:39:2f:2b:
74:02:53:0c:53:bc:ef:5d:67:e9:9d:56:b8:57:76:b1:c3:fe:
25:3d:a0:8f:72:d7:cf:5a:38:fb:51:dd:00:31:53:8f:70:3b:
8c:38:d4:0b:f4:4e:fb:e5:21:4b:a6:9d:75:ff:53:dd:05:14:
98:d9:eb:cb:03:61:de:12:6d:2c:b4:dc:90:79:8f:27:35:fb:
49:be:96:ec:d6:98:82:a2:0f:bf:75:43:7c:1c:4d:62:43:b1:
1e:52:b5:7d:0e:5d:03:bc:82:32:6d:73:f0:74:1c:6c:c2:10:
5c:e4:ea:03:06:8f:13:4d:92:ec:0e:06:98:0b:a5:ca:76:93:
52:fd:85:dc:86:35:02:1d:1f:b6:44:54:99:39:99:8d:85:b0:
49:4d:34:a5:5e:de:c7:07:46:45:57:94:5c:36:66:81:4c:45:
54:1a:c5:39:d9:d1:7b:48:15:3e:c6:4d:8c:2d:14:7c:d5:10:
50:4b:20:38:7b:aa:7d:7d:91:27:8c:da:bc:49:b8:9f:7f:ed:
64:ae:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:37 2025 by rpki-client