Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa
File: 513415BC400011EE88B66B4FC4F9AE02.roa (raw, json)
Hash identifier: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs=
Subject key identifier: C0:90:75:C4:15:7C:A6:61:F9:AA:56:B7:EC:CB:E5:88:43:3B:A9:3D
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 02D7
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa
Signing time: Fri 15 Mar 2024 03:05:21 +0000
ROA not before: Fri 15 Mar 2024 03:05:21 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 133467
IP address blocks: 103.84.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Mar 15 03:05:21 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65f3baf0-b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:9f:8b:21:9a:43:d8:e2:c1:64:0d:a1:55:
31:99:f9:db:6e:57:fa:1f:75:82:2b:b9:be:de:98:
d7:17:98:b6:7f:69:7b:08:11:ff:8e:40:85:6d:a2:
98:fa:0e:98:dd:b7:db:fd:a8:2e:0c:9f:44:50:f9:
23:bc:b8:fa:2e:d8:56:13:08:8a:8e:a3:1d:f3:69:
4b:85:6f:53:67:7b:7a:55:da:0f:93:d3:d0:76:d7:
1e:3c:5d:c8:ee:58:7b:61:93:ca:55:3e:4c:21:c7:
c8:06:67:1f:b7:72:1c:46:8d:48:a9:27:ca:c8:f3:
ef:6a:21:cc:1d:f2:a8:d5:5c:00:7a:0c:de:94:c4:
93:22:95:05:41:dc:4c:47:ec:2a:14:e8:45:48:1d:
e5:8b:21:cf:50:13:15:24:a7:5e:6c:d1:bd:53:91:
3f:a1:84:03:ee:15:f3:6c:b8:51:11:91:77:07:99:
a3:7a:db:dd:c1:3a:05:01:05:fe:62:72:87:bd:c6:
7c:80:86:5d:1a:92:16:57:78:11:6d:32:61:42:bc:
2c:1b:81:22:26:a1:ed:59:c8:58:d2:f4:6c:f7:f0:
ad:71:3c:a2:8d:bf:6e:00:11:d6:11:70:85:0e:ad:
cb:65:11:7a:4a:72:11:4b:cb:70:e3:39:2b:d9:be:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:75:C4:15:7C:A6:61:F9:AA:56:B7:EC:CB:E5:88:43:3B:A9:3D
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/513415BC400011EE88B66B4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:ab:f3:e5:a5:1a:90:46:83:f5:0c:1c:18:e0:ba:d7:3b:fe:
e1:64:7f:db:81:b1:7a:4a:51:1d:29:be:e7:ad:c9:8a:1b:04:
97:50:96:14:59:2a:1b:d6:d0:24:6f:91:fd:c7:ef:86:16:2d:
69:27:d1:c7:70:4e:5c:c0:30:f0:b5:8c:b8:d5:00:49:0a:15:
9e:51:5f:be:52:65:74:53:7e:6f:2a:c5:e8:9c:81:22:4a:05:
09:a3:2a:0f:db:42:87:87:51:00:c6:66:11:84:02:1c:ef:c8:
72:da:1e:e4:b5:f1:61:2b:b6:e5:a6:c0:d8:a9:e6:e0:75:48:
54:54:af:9b:dd:fc:83:4d:76:2f:eb:e3:eb:3e:d1:59:72:8c:
6b:99:ae:1a:cc:93:2b:99:e6:70:a3:f8:a7:e6:43:76:ef:66:
41:a4:c6:b4:c0:ee:0e:75:fe:14:6f:df:eb:00:51:72:43:b7:
3f:3b:83:a9:4b:63:79:94:62:24:02:e3:8c:e9:7e:df:73:93:
b5:e0:77:4c:7c:a8:2a:1e:50:c1:e4:c1:ef:80:22:6f:6f:90:
6c:6b:b5:3a:1f:50:72:14:05:06:95:11:de:1a:29:4d:94:7c:
be:8d:44:ef:b0:02:63:68:99:34:04:c9:1b:6e:24:dc:87:88:
ab:12:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:32:45 2025 by rpki-client