Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
File: 9F2711861C8C11ED903AF819C4F9AE02.roa (raw, json)
Hash identifier: m3IL/Nx+bW0gwi3M1I53/qMj9OSn7nf8hhPK7849ajY=
Subject key identifier: 9F:9A:55:33:E5:DC:03:53:BF:13:2C:50:1A:38:EF:D5:CC:9B:28:24
Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial: 0258
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
Signing time: Wed 27 Mar 2024 03:45:38 +0000
ROA not before: Wed 27 Mar 2024 03:45:38 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133128
IP address blocks: 103.162.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Validity
Not Before: Mar 27 03:45:38 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66039662-d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:5f:04:b9:be:e7:8f:e4:98:53:00:04:1b:
6e:2a:27:4e:f9:dd:8e:26:4f:c3:7e:93:1c:3c:e2:
16:48:a9:fd:65:54:11:8f:67:f0:4b:8a:28:5f:e1:
1b:86:99:aa:7b:f0:e9:cb:d6:12:45:10:37:db:74:
c4:33:4c:9a:42:f5:a1:1b:da:b4:14:48:73:72:b1:
7a:f6:d1:ed:8b:21:30:69:86:60:bc:02:c9:3a:be:
ad:d4:7b:1d:12:54:09:95:00:65:32:4c:dc:ca:59:
50:92:c6:36:bc:10:ed:74:31:83:a9:5d:34:56:d8:
53:da:5b:ee:4b:92:8c:70:53:87:89:0d:15:17:d6:
3d:4b:4b:e2:71:09:a7:75:83:4e:74:58:d9:31:32:
3f:e5:73:3f:ab:30:ff:6b:b9:30:78:fc:a2:b1:d7:
08:f9:8b:04:76:7e:f0:46:68:b5:6d:c0:89:aa:b5:
91:11:35:f2:db:aa:54:af:cf:ff:5c:04:1b:cb:7d:
4f:3e:c8:c6:b7:44:ea:69:ce:fd:ae:f1:5b:be:bc:
d7:06:6a:eb:e4:ca:29:35:1a:d8:a5:79:a8:e4:70:
45:a3:ee:66:25:73:b9:b7:7c:88:5e:1b:0f:f9:ad:
15:e8:1a:e3:87:f0:b1:2f:8f:62:e6:56:b0:bc:0a:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:55:33:E5:DC:03:53:BF:13:2C:50:1A:38:EF:D5:CC:9B:28:24
X509v3 Authority Key Identifier:
keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/9F2711861C8C11ED903AF819C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c3:65:83:3b:a9:9d:1e:12:54:8c:af:f9:fb:63:18:5e:58:
9e:82:1d:22:f3:e8:db:7b:3f:1c:74:93:2d:3e:a1:4d:fa:22:
c3:6e:94:ea:46:f1:65:56:31:a5:dd:da:e2:8f:84:b7:6f:eb:
1b:92:f4:68:7a:40:38:6e:39:61:96:e4:f7:ce:d2:35:80:87:
1c:d5:51:32:75:bb:86:4c:81:f2:66:40:a2:70:83:26:36:ac:
60:99:dc:23:d5:b3:24:a3:1e:31:86:c6:48:82:4b:01:bd:e3:
50:c5:bd:7a:c0:b7:75:ca:6c:f9:cf:df:b7:18:41:9c:41:7b:
99:e4:cf:9a:85:12:7f:37:ef:e4:fa:67:8d:7b:49:0b:4e:40:
c3:46:62:26:84:3f:ae:83:6b:4e:8c:45:61:7e:f8:cf:d5:f7:
dd:6d:ea:72:b6:80:ce:82:78:61:d7:17:c1:ec:f8:8d:44:7e:
e4:f0:dd:54:bf:23:52:57:b0:3d:f9:6e:07:9a:bd:1f:55:28:
e2:45:9b:36:1b:b9:29:ea:67:dc:08:4d:c1:a6:95:ec:3b:02:
16:2a:81:1f:32:b9:88:2f:c0:6f:bd:01:07:d3:1c:d1:2e:99:
1c:c7:be:8e:df:69:36:d2:4c:a7:92:48:43:f2:b4:f2:be:af:
6f:56:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:38:27 2025 by rpki-client