Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
File: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (raw, json)
Hash identifier: MW4brkS6iGYL+cXbHPuK8G2FUwzp/GEC0uyblPeDq90=
Subject key identifier: F3:F1:FC:12:F0:7C:A1:42:BC:33:DF:BD:82:D7:17:F0:8A:CB:77:79
Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial: 2C
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
Signing time: Tue 03 Sep 2024 08:20:29 +0000
ROA not before: Tue 03 Sep 2024 08:20:29 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140062
IP address blocks: 103.69.164.0/22 maxlen: 22
203.14.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Validity
Not Before: Sep 3 08:20:29 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6c6cd-a719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:e5:a5:bf:52:30:00:e1:12:57:eb:f7:7f:
8a:c5:a3:b9:ab:83:9e:65:83:2d:56:2a:85:6a:6c:
b7:67:4a:85:8d:ac:03:17:8d:6e:c1:90:b6:43:a9:
99:07:b9:e2:d6:5b:bb:a1:58:ae:84:a9:b4:4e:84:
3b:5a:e7:32:bc:58:5b:32:ac:e6:e5:14:05:0f:55:
e1:ef:0a:71:06:a3:13:49:73:ef:03:aa:5c:f0:8d:
c5:d1:34:0c:21:01:31:3a:31:df:6f:b0:4a:44:84:
74:f0:b8:cf:14:e4:47:7f:54:8d:38:dc:06:01:64:
e1:81:13:e9:30:8c:62:41:33:c2:7c:4e:8c:85:6c:
a6:08:0d:ea:5a:9f:e6:3f:22:30:03:97:1c:49:97:
09:fa:a6:e5:f4:89:b0:ba:34:f2:38:da:05:73:84:
4b:cd:80:88:43:63:31:e6:e6:8e:ba:29:cb:95:0e:
53:12:a7:ee:f5:bc:74:10:f5:54:53:cf:9a:28:79:
c3:0e:4e:9c:a4:54:ed:93:cf:e6:10:1d:4e:9f:08:
70:87:e3:01:96:68:13:1a:86:ae:1b:78:6f:40:1e:
bc:1c:76:fa:59:23:39:2c:9e:d4:0c:5d:bb:b4:96:
5e:7a:29:38:b8:50:65:a4:0c:1d:2d:19:a1:9e:9f:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:FC:12:F0:7C:A1:42:BC:33:DF:BD:82:D7:17:F0:8A:CB:77:79
X509v3 Authority Key Identifier:
keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/7594FBFA2C7311EFA27A6526C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.164.0/22
203.14.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:d3:0b:dd:93:e5:32:55:02:f5:c1:af:34:58:1c:1d:0a:f5:
dc:05:98:9d:26:ca:47:58:60:15:70:59:d5:31:1c:2b:f3:fa:
5e:b5:d7:07:5b:33:25:0f:fd:60:5b:4f:35:1d:6d:4d:cb:a0:
3b:5d:b4:18:bd:a2:4a:05:ce:f9:d3:99:eb:8d:bc:ee:7a:66:
ae:80:2c:77:8b:a1:87:c2:ba:63:9c:c5:e8:0d:eb:4d:b7:8a:
8d:d8:ba:b7:57:2f:26:17:f5:cc:6d:8c:f7:2d:1c:bf:5f:83:
56:a1:35:53:c1:45:20:b9:fa:b6:d3:88:ef:e8:ab:0c:01:1c:
cc:72:b4:a9:a1:f7:74:3e:28:af:49:4b:46:d8:55:11:17:aa:
24:96:e0:bf:fe:58:55:c0:86:3c:62:ce:31:80:28:de:72:6f:
11:3c:40:98:c4:04:b9:df:c8:57:77:0c:74:55:7c:6b:18:65:
48:4b:25:3c:2c:1d:f9:3d:75:96:55:ee:04:c7:88:9b:84:a2:
7c:8d:03:98:53:f9:77:3b:fb:25:98:21:3a:61:57:04:5e:c0:
c4:f8:63:3d:13:ca:36:b4:bc:8d:01:c1:ad:6e:d9:18:9e:38:
74:30:d3:e6:73:3b:49:23:ee:f7:e6:de:7f:99:e8:80:c4:2f:
0d:16:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:10 2025 by rpki-client