Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa
File: 666595E890A911EDA8F5FF52C4F9AE02.roa (raw, json)
Hash identifier: 0hhYQv1Dx0IGJd7nJvn9S2TIbOnrfwA1D6BasQDOlWU=
Subject key identifier: 85:6D:61:9D:9D:A9:DF:E9:BA:6D:A3:04:FB:5D:BC:04:F6:57:F9:3C
Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
Certificate serial: 0676
Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa
Signing time: Wed 24 Apr 2024 23:32:32 +0000
ROA not before: Wed 24 Apr 2024 23:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140324
IP address blocks: 103.149.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445
Validity
Not Before: Apr 24 23:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66299690-cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:28:f4:bc:f7:1a:6f:73:53:68:c8:db:bc:
db:a9:5e:df:1b:81:2c:55:52:7a:b5:95:c0:f0:18:
62:7f:0d:db:2d:39:ff:9c:36:e7:25:37:e1:8c:f6:
b7:db:a0:b4:4c:3e:7c:c1:bc:be:bd:f6:4b:ba:76:
22:dd:80:9a:cf:c9:e3:1d:21:56:28:b5:ba:d1:6b:
07:4a:d9:da:fa:21:9d:3a:17:57:01:6a:d6:ea:07:
f5:8f:93:55:e2:57:ff:4c:4a:03:df:55:66:21:11:
aa:52:ee:31:0b:94:35:ee:ed:56:21:bf:c6:3e:a2:
c8:11:25:39:72:5e:64:8d:87:4f:e0:98:14:1a:4f:
f3:c7:17:f9:a3:84:ce:e5:47:e7:71:2d:f8:24:f6:
d5:b8:ca:97:a1:70:99:c3:c2:50:ff:c4:48:43:27:
a3:b6:df:92:7f:e1:ce:58:d3:55:42:e3:cd:3d:73:
e9:9b:c1:39:8b:18:3b:9c:2c:a3:d2:d9:a2:71:1f:
44:60:33:0b:e8:68:6a:e2:6b:59:96:41:91:27:7b:
f7:75:9b:f2:fd:a4:d9:f4:76:63:94:ff:dc:3a:11:
3f:fc:9b:2f:26:c2:b0:4c:59:f7:9c:01:53:da:83:
79:6c:c5:56:d7:86:26:47:f0:42:a8:8d:ed:ac:13:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:61:9D:9D:A9:DF:E9:BA:6D:A3:04:FB:5D:BC:04:F6:57:F9:3C
X509v3 Authority Key Identifier:
keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.204.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:a5:5c:4c:ae:9c:9a:be:1a:43:c8:5e:92:42:54:42:d1:f8:
6e:27:df:1a:30:7e:99:b8:09:52:17:16:57:a8:e4:1a:21:8e:
14:6c:f0:5a:a7:74:8f:e8:89:12:4f:e7:27:e4:8a:2f:2c:7b:
e5:3f:4a:f6:9b:6d:7c:01:fe:b8:8e:96:a7:2e:d6:45:9c:fb:
5c:12:4c:4d:27:56:c4:05:ba:85:53:49:b3:44:8a:6b:64:2b:
76:0c:2b:64:3f:a8:a3:84:d3:43:34:0a:d7:cf:a9:06:8c:82:
69:6c:a6:d9:3d:56:8b:4a:16:2b:01:20:35:8f:6b:25:ee:9b:
76:74:60:b7:01:a5:b9:3d:7b:44:7c:4c:26:1a:7f:d8:e9:03:
4b:68:b1:1a:73:e0:51:2a:85:65:64:67:58:0e:f3:83:58:01:
bd:4e:94:3a:ec:08:4b:86:c7:4f:81:54:7b:9a:0a:0b:d6:d3:
01:a9:ab:f9:12:64:96:61:81:3d:cf:ef:91:5e:f6:f6:e9:03:
ee:8d:36:7a:b1:56:21:99:ad:44:0d:db:15:5d:1c:1b:1c:5a:
0e:ee:da:59:21:c5:12:21:b6:39:63:de:a4:09:99:da:d6:ef:
3b:80:21:1e:eb:78:74:3f:53:46:1e:c6:48:71:7e:af:31:9c:
cd:e8:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:49 2025 by rpki-client