Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
File: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (raw, json)
Hash identifier: HE0CwiBUoR42Ac8HkzfJLJ/ETIx9kfwRBCLdGKiPhXc=
Subject key identifier: 92:B9:C9:EC:AE:71:E4:00:FF:9B:C7:BC:2B:E0:0A:8E:70:BE:DC:CB
Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44
Certificate serial: 92
Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
Signing time: Mon 03 Jun 2024 08:41:24 +0000
ROA not before: Mon 03 Jun 2024 08:41:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 151350
IP address blocks: 103.209.74.0/23 maxlen: 24
2401:2a0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44
Validity
Not Before: Jun 3 08:41:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665d81b3-fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:b2:a5:a7:c4:45:b8:41:60:e1:09:e1:6f:
0f:dd:f3:7c:8e:4a:18:e1:59:ca:b3:5c:5e:ee:89:
a7:dc:ce:9b:2a:8b:31:41:ca:7b:d8:0a:a3:f2:47:
a9:72:97:78:bc:fa:f0:9f:5c:92:8b:b4:ca:9d:df:
7b:5b:b5:86:4a:46:25:6e:83:a5:b6:c4:9f:7a:2e:
b0:6e:78:28:6f:61:6f:d0:c2:25:7f:f0:2c:63:76:
bc:7d:d2:81:4b:33:ed:de:dd:24:fd:27:b2:bf:38:
3b:70:39:9c:37:80:d3:66:4c:5f:dc:d1:43:8d:9a:
06:9a:b3:38:27:9c:26:38:4e:56:a4:4d:af:f3:71:
7a:91:58:3f:d9:e3:1e:c5:cf:60:50:92:7b:9d:8a:
b3:95:b0:0a:4c:41:67:91:01:52:63:0a:af:b5:b7:
74:64:fd:29:d3:85:f4:22:c4:05:de:60:8c:37:83:
0f:6e:92:c3:9a:c4:75:27:fe:fc:bc:d3:16:5a:97:
82:1a:24:86:78:f7:67:f1:cb:12:e8:b7:42:31:56:
df:36:74:47:2e:86:db:70:00:2e:b5:6b:f0:ba:93:
56:39:4c:b1:3f:b5:8e:b0:f0:82:04:c6:e8:5d:54:
b0:e5:77:b2:dc:45:ff:5b:f8:99:ab:a2:1f:bc:c2:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:C9:EC:AE:71:E4:00:FF:9B:C7:BC:2B:E0:0A:8E:70:BE:DC:CB
X509v3 Authority Key Identifier:
keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.74.0/23
IPv6:
2401:2a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7b:79:75:07:be:4a:8c:18:4a:47:28:25:81:ab:a1:dd:58:c4:
71:06:a9:78:1c:26:c4:8f:88:44:09:21:8b:b9:c5:d8:ae:4a:
28:3c:42:bc:63:b5:67:4d:40:7a:5d:09:1e:5f:3f:34:b1:12:
f1:a1:b2:11:83:6e:4c:ca:32:31:65:81:73:dc:b0:64:3b:22:
60:f6:52:1e:7e:01:5c:11:2f:ad:25:c9:af:50:41:5b:75:90:
ee:fb:87:97:d1:b8:e6:49:40:86:48:20:ae:d9:4c:7e:b7:24:
5b:b5:03:47:ea:fd:29:5d:45:51:92:f3:19:04:0c:79:c0:28:
07:27:3e:cf:74:7f:53:11:f7:72:5c:2e:be:2a:6e:22:0d:b2:
bc:ae:10:4f:c4:35:2e:8b:f8:16:2d:4d:6d:f8:f7:43:99:5d:
05:92:0e:7f:fd:85:fb:3c:18:f8:bb:c6:ea:9d:8d:65:09:8c:
e8:21:14:bd:9f:44:17:b2:fa:af:01:49:8b:99:01:19:7b:51:
07:5f:9a:95:4b:b9:dd:7e:01:09:34:53:06:ca:08:54:b7:1d:
95:59:aa:fc:cc:d3:23:9b:9f:5d:39:1a:89:d3:69:a3:7f:53:
ca:b3:d5:ab:f5:b5:c6:7c:d8:2b:4c:ba:4d:50:00:8d:80:ab:
ee:5d:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:37:05 2025 by rpki-client