Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
File: E9D321CEF2F611EE95E10935C4F9AE02.roa (raw, json)
Hash identifier: 0MDsliqtqRrojbtZYNkkZiieXi7syQdv9RVqPyRdcns=
Subject key identifier: 7F:C9:03:AE:96:FC:CB:65:63:5C:35:7B:67:D6:2F:BA:09:CD:98:2B
Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial: 06D3
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
Signing time: Tue 08 Oct 2024 22:01:11 +0000
ROA not before: Tue 08 Oct 2024 22:01:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135273
IP address blocks: 103.156.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Validity
Not Before: Oct 8 22:01:11 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6705aba7-d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:ca:a1:f4:9a:34:b4:68:e0:01:e6:ca:e1:
d1:b9:17:08:f2:77:1d:8f:39:43:91:f0:c0:71:43:
36:64:44:6b:a0:bf:1f:39:d2:e8:9e:32:15:3b:f0:
94:61:b5:6b:30:d5:dc:22:aa:30:67:b8:0c:a3:d5:
28:ed:c1:61:39:09:d0:64:d0:b2:a3:a4:bd:d0:81:
a0:05:05:58:df:0a:a3:f0:0f:52:22:a2:0c:24:4d:
bd:72:c9:fe:e1:66:79:04:c3:95:14:3c:5c:73:b4:
ba:d0:83:77:28:60:68:2c:b6:35:7b:28:aa:b0:d8:
8d:60:78:ee:ba:43:dd:cd:51:c6:c2:31:c8:77:96:
b4:5c:0b:7c:47:a5:bb:1b:de:b0:64:47:f5:a1:cc:
76:7d:b6:6e:12:14:7a:07:58:87:b3:e3:a0:7e:1b:
63:08:40:a5:97:96:78:95:ec:fa:f1:16:90:94:4c:
84:7a:7d:f2:8d:0d:dc:26:a5:d7:4b:89:c8:8e:97:
2e:f6:20:4a:6e:fa:ed:73:1c:94:da:74:dd:13:2c:
42:4b:cc:b1:af:16:51:10:30:7c:29:cf:1c:3f:c3:
53:10:5d:c8:4b:d1:34:20:46:58:7c:71:14:17:e3:
ff:f5:8a:86:ce:58:5d:47:ea:0e:e3:3e:46:3b:74:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:03:AE:96:FC:CB:65:63:5C:35:7B:67:D6:2F:BA:09:CD:98:2B
X509v3 Authority Key Identifier:
keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.76.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:5f:40:d3:f2:2d:82:81:7e:49:84:98:73:ac:cf:ec:f2:9f:
6e:4e:62:ba:5b:12:71:e2:66:bc:49:a0:50:90:00:37:0e:e2:
cf:7c:51:9b:79:3f:67:89:71:0f:b7:70:c6:ce:57:f2:2e:b5:
f0:fa:87:bf:e4:46:ce:a7:65:ba:a0:da:b3:26:23:09:48:f0:
81:97:5a:de:d1:4e:98:1b:5a:c9:fa:ee:b3:ac:ae:6b:84:25:
1c:dd:3d:02:7b:54:90:3e:10:17:2f:4f:d1:04:04:9a:b6:69:
95:6e:c7:ec:a3:8d:ca:fe:42:ff:6d:1b:a0:90:f1:78:37:56:
ce:1f:e7:61:4b:28:51:cf:1d:a6:dc:2b:da:40:34:d0:ae:64:
6b:05:77:56:2a:e3:81:b8:65:9d:94:8b:87:2f:63:8a:24:97:
9d:d2:53:9a:95:13:ad:91:97:99:ae:94:51:e9:1e:19:9b:ac:
a2:9b:67:e5:28:30:89:85:8a:a3:5a:68:3f:69:a9:69:96:6e:
f1:64:97:53:41:f5:8e:c7:cc:d5:9e:6a:bf:68:f0:65:d3:d6:
9f:88:fd:9d:7f:f4:15:7b:4d:99:21:4a:ab:30:97:d3:53:f9:
7e:fe:ab:b9:0e:b7:77:a7:81:27:73:42:f5:80:15:07:f9:01:
72:a8:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:38:32 2025 by rpki-client