Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
File: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (raw, json)
Hash identifier: 3+LMg/UqEn9I3nJe/StT1XRQjadAQ+o1wAjq5EdYwx0=
Subject key identifier: 9F:49:AE:FF:F7:3D:80:09:BB:92:DF:8F:B7:62:6D:8F:C1:D1:51:C2
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0F38
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
Signing time: Thu 03 Oct 2024 20:53:43 +0000
ROA not before: Thu 03 Oct 2024 20:53:43 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 17916
IP address blocks: 103.30.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3896 (0xf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 3 20:53:43 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66ff0457-4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:e3:33:cc:a9:ee:cf:84:33:f5:56:c7:d5:
e9:d1:bd:6d:c5:a9:a1:64:75:03:4f:6c:3f:69:ea:
7c:2c:db:54:25:90:29:12:f4:59:7c:f7:95:bb:16:
a3:a0:b2:2b:f9:29:c3:86:a4:a2:b1:2c:fc:3c:11:
ba:fd:73:57:19:7d:1d:7b:37:d4:24:21:66:0e:b5:
68:cb:0f:7d:c4:24:d2:df:18:d6:59:91:e0:8c:65:
bf:17:e9:e0:34:a8:ee:bd:55:cc:82:93:2e:7e:65:
8a:23:15:96:a0:b4:69:fa:00:16:24:72:f3:66:fc:
19:c4:b7:dc:fa:bb:79:82:9c:72:76:70:bd:c1:b6:
f7:d6:d2:74:01:07:44:8c:cb:77:79:b3:92:e7:f0:
00:d7:8f:6a:1e:af:e6:e7:59:39:87:79:33:89:4f:
ce:64:83:f2:eb:ed:82:59:7b:29:3c:a8:0c:dd:ab:
6e:63:5a:4a:13:66:ff:ab:93:7f:fd:78:a3:67:8e:
c0:01:09:7a:9f:2f:25:c3:e8:d4:74:81:50:fb:5e:
50:28:ed:9f:66:24:73:d2:13:c4:57:c2:49:3b:c0:
63:ea:92:aa:a8:8a:33:32:ab:9b:29:f3:69:63:fc:
61:10:71:3b:38:3a:f4:c2:6a:0e:44:23:f4:d5:b6:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:AE:FF:F7:3D:80:09:BB:92:DF:8F:B7:62:6D:8F:C1:D1:51:C2
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931E0F7681C911EFA5B1D80BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.184.0/23
Signature Algorithm: sha256WithRSAEncryption
01:10:6e:5f:e0:15:1c:27:79:62:56:27:e7:bf:89:8d:cf:61:
c9:e3:78:e5:65:02:b5:4e:1e:e2:03:7c:65:8f:fa:99:2f:ec:
9d:2b:c5:6e:15:50:fb:38:8c:54:ad:01:72:b4:f8:ae:52:93:
70:33:9f:aa:25:43:1e:94:9c:4b:ac:cc:f5:85:99:d7:9f:ca:
e9:fc:b7:83:2b:c7:3b:3e:4f:b8:a7:ac:54:b2:49:98:a9:fe:
c9:ae:f2:df:bc:4a:03:62:73:90:ac:f1:06:b0:97:98:9c:ec:
f4:0f:44:e3:eb:ab:cb:18:82:77:56:c2:1d:32:81:55:c4:30:
9d:5e:06:e4:07:41:16:a1:eb:3a:00:4e:31:62:2a:c8:07:1c:
8c:f3:d5:8e:24:ac:67:d8:5e:12:64:28:35:3b:b1:ed:1c:c9:
03:60:2d:05:b3:32:16:3d:e8:6f:0f:43:51:c2:48:65:ce:57:
67:18:7e:a8:83:b7:f5:8f:8f:a8:10:85:21:0c:2a:19:17:c3:
18:f3:85:e4:e8:83:ec:57:b5:d7:99:78:ec:87:c5:5e:e9:9a:
5b:96:33:35:02:82:f8:9c:67:87:84:f3:e3:01:48:56:6c:32:
bf:5e:b8:d0:19:86:ff:5a:ca:8e:db:02:2d:c3:c6:2f:33:45:
1b:a3:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:56 2025 by rpki-client