Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa
File: A98754E2F1D011ECA4B56760C4F9AE02.roa (raw, json)
Hash identifier: 93C3ip8IAc66vxePjOVcSjubt03Yf9sEjcjXT+Nlxb8=
Subject key identifier: 91:3E:4C:17:7D:F6:A8:C5:69:1F:60:66:1C:8E:2D:4E:B1:22:BA:22
Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Certificate serial: 01C5
Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa
Signing time: Tue 23 Jan 2024 04:05:16 +0000
ROA not before: Tue 23 Jan 2024 04:05:16 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138583
IP address blocks: 103.133.212.0/24 maxlen: 24
2001:df7:bb80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Validity
Not Before: Jan 23 04:05:16 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65af3afc-2282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:07:14:be:bd:f5:1b:ae:36:63:f4:d6:52:
ab:45:0a:1f:f0:26:fe:aa:6e:4a:2f:05:f5:24:d8:
98:59:dc:f0:c6:9b:48:3b:e5:8f:b0:d4:73:c2:50:
52:eb:44:77:df:ee:28:65:5a:ad:23:23:c2:36:f5:
fa:dc:55:ab:bd:53:f4:75:2d:78:43:56:21:78:4f:
8b:a6:22:f6:c3:5a:6c:1c:ce:00:f6:66:e8:26:a2:
c3:b8:f4:40:b6:81:3d:03:d2:32:1a:92:10:c1:e4:
a4:80:8c:15:03:30:1e:c5:c4:34:1d:85:35:9a:20:
fb:14:79:01:5a:54:f9:9d:28:0e:e6:96:14:86:bd:
d6:71:cb:bb:8d:89:c2:91:8c:29:6b:17:98:42:52:
2f:fa:f9:e8:53:78:a1:b6:9d:03:af:84:48:3f:3c:
21:a8:61:07:65:55:68:a6:5e:ae:63:82:88:90:76:
79:39:51:ab:dd:49:ed:50:7a:32:01:99:98:ed:ac:
9f:93:f0:ab:b5:bc:69:94:75:36:93:66:40:61:86:
e1:d6:40:a2:9a:63:ac:46:fb:2c:56:4f:0f:97:b0:
3e:64:81:0f:60:ea:5e:fd:7c:2d:d1:bd:f8:55:19:
85:99:47:4e:68:33:eb:91:9a:71:41:88:29:be:52:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:4C:17:7D:F6:A8:C5:69:1F:60:66:1C:8E:2D:4E:B1:22:BA:22
X509v3 Authority Key Identifier:
keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/A98754E2F1D011ECA4B56760C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.212.0/24
IPv6:
2001:df7:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
ab:67:d3:2a:75:70:5a:8b:e5:f6:3e:69:8c:bd:cd:f2:e3:60:
04:3f:30:33:68:87:fe:ff:9d:07:1a:73:40:12:ec:3e:97:eb:
95:19:b3:89:45:76:0c:a3:12:43:3a:62:2f:cb:8f:49:31:76:
9a:aa:a1:cd:52:81:6b:8b:ee:0c:a3:9d:75:bc:07:07:38:35:
31:ca:49:4d:c4:e2:8f:8d:30:9b:87:36:75:3e:97:cd:82:71:
8e:9c:9d:75:41:ad:f3:86:9d:63:3d:28:24:21:e0:4e:2b:df:
31:a9:ee:ad:9a:d3:87:c3:a2:76:f3:1a:f5:0d:19:3a:2e:d7:
78:13:87:1a:e1:3b:b7:1e:99:1c:20:8a:2e:b4:f9:57:bd:1f:
3c:2e:8c:c9:ec:cb:a0:61:00:b2:73:2f:f8:50:31:61:86:10:
55:92:0d:40:f8:c6:6e:10:c9:47:ff:1f:59:20:a8:d3:bc:96:
46:20:88:2f:38:cf:81:53:32:f8:e0:11:62:ba:ec:d6:fc:4a:
b9:7c:c2:44:3f:0a:21:f5:47:0d:df:bf:4e:41:60:2c:f1:5f:
ee:d5:c0:29:86:27:0d:20:f4:51:39:ec:d6:4b:e7:09:bb:3f:
5b:19:20:1d:f3:ed:3d:d8:da:29:38:dd:c4:69:60:aa:11:15:
d8:56:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:12 2025 by rpki-client