Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
File: F865B8887CEB11ECA79BD83DC4F9AE02.roa (raw, json)
Hash identifier: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=
Subject key identifier: 66:28:F2:A9:0F:37:D2:73:FC:E5:5C:06:74:41:8D:A4:2A:D6:3A:89
Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial: 0388
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
Signing time: Thu 07 Nov 2024 00:33:15 +0000
ROA not before: Thu 07 Nov 2024 00:33:15 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 136533
IP address blocks: 103.175.150.0/23 maxlen: 23
2400:1ae0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Validity
Not Before: Nov 7 00:33:15 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672c0acb-23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:f1:d1:e0:3c:8d:1e:ff:d2:06:65:ee:0e:
7d:74:5f:3a:64:a2:dc:e8:5b:a2:ac:fb:61:14:f0:
7f:ce:8b:1d:68:51:5e:e8:ae:96:08:ad:52:72:20:
1c:23:f5:4c:57:87:44:c4:b7:39:f2:fb:51:93:f7:
c9:bd:8b:b7:63:6b:8f:87:34:ae:14:09:13:5d:fa:
98:91:54:ca:48:09:34:41:6a:00:08:ff:48:bb:fc:
f8:82:20:e4:c4:b8:bb:6c:34:2e:3d:97:ac:dd:81:
e6:03:74:37:08:9f:48:11:61:7b:95:61:20:5e:ed:
51:96:d4:ff:ae:53:00:30:b5:7f:de:b6:c9:f2:e1:
3c:b5:6f:e9:df:f9:dd:d7:5f:f2:bc:03:52:2d:51:
cf:48:ea:dd:f0:7e:04:5e:ac:ea:3b:c9:b2:a7:c9:
50:d5:36:9f:77:00:8f:05:57:99:60:c8:5b:be:f9:
91:05:e8:0b:ff:94:37:eb:d2:ea:a0:b8:9a:e0:93:
4d:c0:65:d3:ab:ae:45:87:0d:e5:fe:70:85:93:d5:
a1:8c:db:e3:d7:0a:13:8e:e1:e0:5d:43:19:81:a8:
e9:39:0f:f4:a4:d7:95:f8:cd:ea:aa:01:3a:26:a1:
63:a3:5b:a8:c1:c3:2e:e6:19:9b:05:f4:6b:fe:1f:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:F2:A9:0F:37:D2:73:FC:E5:5C:06:74:41:8D:A4:2A:D6:3A:89
X509v3 Authority Key Identifier:
keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/F865B8887CEB11ECA79BD83DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.150.0/23
IPv6:
2400:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
08:dc:4e:38:3b:39:66:02:8d:56:3d:99:fc:f8:e4:5f:89:30:
88:a3:cc:c8:82:19:50:b4:c1:73:3e:3f:c9:51:5d:95:b7:45:
fe:53:20:6e:8f:08:93:57:a0:4f:c8:e9:1c:db:53:96:66:4a:
04:44:54:f4:2f:34:02:c1:b9:c9:29:89:57:a8:ef:d3:c0:09:
3c:71:08:d3:31:83:74:2a:65:47:f9:bf:88:01:f6:96:9e:b2:
0b:a1:f2:07:4f:4b:4b:5e:de:79:84:3f:9a:6c:d8:98:25:ba:
8b:a1:00:3d:32:54:84:fb:eb:e8:db:98:79:74:80:51:de:c3:
ad:9a:04:a3:07:ea:e5:c5:4c:89:0d:6a:1c:c0:64:4d:82:30:
3a:c1:8e:52:ea:fc:e4:53:73:c7:9b:33:98:2f:a0:48:47:fc:
a3:b0:f9:9c:2f:9a:7f:0b:dc:ac:b0:79:2b:fa:1d:6d:01:41:
30:f4:a8:74:d9:dd:02:b4:84:34:0e:f1:1f:f1:70:11:0f:db:
ab:19:b2:3c:ff:45:b4:b7:fb:74:86:36:b1:0b:95:dd:85:1c:
f3:0f:41:d2:8e:4f:0e:fb:ad:0f:7d:81:5c:1f:23:0f:44:cc:
72:87:a2:35:cd:75:45:31:8a:5d:6b:a4:3a:c1:3a:48:d4:71:
e3:c2:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:36:54 2025 by rpki-client