Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
File: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (raw, json)
Hash identifier: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=
Subject key identifier: EF:A5:D4:31:47:AC:FB:D9:77:63:89:2C:D5:49:21:2F:2E:64:E5:F0
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 018B
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
Signing time: Thu 29 Aug 2024 03:46:01 +0000
ROA not before: Thu 29 Aug 2024 03:46:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131275
IP address blocks: 103.203.88.0/24 maxlen: 24
103.203.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Validity
Not Before: Aug 29 03:46:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66cfeef9-9ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:fc:89:25:b3:0f:fd:66:88:b6:bf:46:6d:
5f:eb:34:b9:dc:91:7f:93:7e:6a:65:9b:22:12:df:
e5:c6:07:4d:3a:82:f2:00:3e:44:b6:43:9b:46:60:
a3:ae:44:f6:ed:d2:5d:97:af:e1:8f:fa:ff:b5:41:
7b:37:35:e3:8d:3c:4e:32:69:af:ab:44:24:41:a1:
2a:c7:31:47:7e:95:5c:f9:ee:d9:19:ae:ec:8b:f2:
e6:08:ae:75:ee:b1:74:17:8c:eb:0a:6e:02:f4:55:
b7:26:33:3f:79:bf:5c:fc:cd:94:11:45:79:91:46:
94:ee:4f:8f:89:73:d5:e5:b5:05:39:ee:21:d1:13:
bf:05:c5:0e:56:9c:33:56:7d:73:df:44:c7:1c:cb:
da:0a:00:8c:cc:31:6e:47:d4:c0:65:74:6a:ae:d4:
b2:b2:79:34:86:11:9b:62:7d:ca:4a:cd:16:8c:24:
04:a9:0a:44:d8:69:73:9f:4e:a5:95:bc:05:e2:90:
dd:f1:cd:a5:21:58:c5:2a:b4:a4:a2:c6:27:8d:2d:
b9:45:fa:4a:79:c1:1c:73:5b:64:71:e3:b4:d5:e6:
9a:5c:ee:58:82:75:1c:52:58:02:07:b2:2a:f2:c1:
a7:1a:d3:a7:32:ae:6f:97:30:38:ec:4c:2a:f0:51:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:D4:31:47:AC:FB:D9:77:63:89:2C:D5:49:21:2F:2E:64:E5:F0
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/378FB0D25B9211EEB8E7453DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.88.0/23
Signature Algorithm: sha256WithRSAEncryption
40:cc:fe:e1:0c:d5:bf:17:5b:f0:cc:f9:7e:01:42:4b:f4:b5:
a4:34:73:6b:a9:10:05:2e:f5:4d:4e:56:0c:e5:5b:2a:91:b7:
be:31:1c:8d:a9:1f:59:5f:d5:fc:21:40:b1:b1:d3:1e:d2:ae:
58:c8:04:74:72:a1:40:c7:5c:cb:04:1b:b7:58:c0:0f:cb:f9:
af:22:af:87:04:d0:28:9f:35:6d:d7:45:9a:d8:6b:5a:82:6b:
dc:d0:94:de:dc:9e:0a:2f:79:d7:2b:45:2d:96:16:f9:58:af:
94:f4:2b:a6:77:22:85:15:cf:80:dc:6d:ef:2f:35:2b:e5:b4:
0b:43:65:8f:1a:73:cc:fb:f3:11:42:21:83:85:b0:91:b1:06:
c7:55:ec:3f:b8:9c:af:83:c0:0d:1e:9a:73:38:39:8f:26:28:
23:54:06:32:54:70:4e:9f:a5:e5:2d:ad:21:4e:53:c0:95:db:
24:bd:99:e2:41:72:b7:7d:49:cd:b6:73:3d:37:f7:9d:0a:b9:
c9:f3:ee:39:2b:98:24:8f:cf:71:84:c5:c5:f1:d6:b9:9d:49:
c9:8a:ca:1a:d8:da:11:f6:9f:05:53:05:03:8e:41:b0:66:8a:
49:cb:76:53:94:25:25:a4:83:ed:fb:03:74:d2:7d:d9:85:0f:
d6:4f:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:07 2025 by rpki-client