Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa
File: DF5D49F6985611ECBE7ED328C4F9AE02.roa (raw, json)
Hash identifier: Jye8x95uFjD/OaUFMn6lb2ErVEwMFKU3iECzbKAX1vQ=
Subject key identifier: 4E:FB:9E:F5:B2:C4:3C:03:9B:51:34:0B:28:35:80:05:79:52:EF:B5
Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Certificate serial: 0D71
Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa
Signing time: Sat 02 Mar 2024 18:56:35 +0000
ROA not before: Sat 02 Mar 2024 18:56:35 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.85.214.0/24 maxlen: 24
103.85.215.0/24 maxlen: 24
2001:df5:6d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3441 (0xd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D
Validity
Not Before: Mar 2 18:56:35 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e37662-dfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:d3:0a:cd:75:7d:a9:1e:bf:f0:99:a9:6c:
6c:27:a1:df:1d:17:1a:bd:24:36:e0:6f:5e:cd:ae:
2d:bd:ed:df:ea:98:c4:67:9b:94:69:29:87:e8:2f:
09:19:9f:de:26:48:37:d0:84:05:b5:ca:37:b2:c5:
3c:72:9f:f5:3a:97:ef:ed:97:ad:4c:3a:7c:99:9c:
1f:a1:75:77:32:53:f8:50:3a:d5:69:5f:f1:9f:66:
8c:c6:95:45:42:5e:6a:82:6b:f8:4a:65:d4:08:ed:
c0:b4:14:3d:da:1c:b4:63:32:85:4f:be:bd:c0:10:
27:f7:9c:6c:11:44:2f:a5:88:32:82:58:b7:33:48:
3a:90:be:e0:d0:03:d1:3d:cd:68:17:f7:fa:de:70:
0a:5b:55:b9:d4:85:fa:1c:93:c8:f6:fc:74:ef:a2:
c8:d4:8f:fb:5c:61:45:0f:37:7a:9d:ad:28:f9:ff:
59:45:24:1b:12:5c:00:87:00:16:60:03:3b:6e:38:
8e:50:c1:20:b7:94:fd:30:5a:60:00:4a:95:42:34:
d9:85:a4:30:6b:8e:7d:9b:90:0f:ef:ee:35:5f:e3:
95:2f:df:27:3f:f7:85:82:35:24:b7:16:ff:c0:7d:
e9:34:86:e0:bd:93:b4:86:74:ca:5e:ce:ad:dc:be:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:9E:F5:B2:C4:3C:03:9B:51:34:0B:28:35:80:05:79:52:EF:B5
X509v3 Authority Key Identifier:
keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.214.0/23
IPv6:
2001:df5:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
80:c6:4e:49:2e:8b:ef:c3:93:83:6d:38:fb:80:b7:fb:5f:cd:
01:f6:43:52:00:c9:09:37:ec:0a:b3:b3:f3:a2:c6:97:97:8f:
50:60:1c:6b:0d:a2:4e:50:21:db:c0:cc:93:db:62:0a:e4:08:
b4:af:49:43:c5:7c:e1:14:d0:08:e6:02:f5:f3:85:37:ef:8b:
0a:f8:41:21:2e:11:e2:44:3f:15:0c:9d:14:00:53:6a:42:4c:
d7:a9:89:78:7e:2f:57:3f:76:49:36:b1:aa:f6:e3:29:ab:54:
32:80:1b:13:76:da:16:85:7c:72:f3:a3:4d:43:93:bf:da:a4:
09:2d:5d:40:5e:e3:d6:08:91:48:f8:5d:88:3f:59:aa:9a:a3:
69:30:f8:96:48:63:53:6c:ee:bf:13:26:ed:cb:6b:70:7d:c4:
e4:f9:ae:9f:b2:03:fb:d9:4a:92:f7:47:81:9c:18:a0:49:12:
e7:05:0d:de:c6:bb:e7:aa:15:0b:0b:e4:77:c6:df:27:ba:b2:
52:39:7f:74:07:3d:a5:c7:aa:97:3f:71:af:60:3d:1e:28:47:
ac:52:de:51:79:82:b6:0f:91:1f:4b:fc:a0:65:5d:ad:52:17:
7e:e8:a4:5d:c8:c1:b9:6b:a4:73:38:c9:b0:7a:63:f8:39:dc:
3a:a1:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:30 2025 by rpki-client