Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
File: 777244A4506A11EE8D08A11BC4F9AE02.roa (raw, json)
Hash identifier: o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=
Subject key identifier: DA:87:93:44:3F:65:44:83:0E:ED:BF:86:B0:26:D2:2C:54:04:36:D5
Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial: 0150
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
Signing time: Mon 23 Sep 2024 02:56:18 +0000
ROA not before: Mon 23 Sep 2024 02:56:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 131465
IP address blocks: 103.49.146.0/24 maxlen: 24
2001:df2:e940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Validity
Not Before: Sep 23 02:56:18 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f0d8d2-f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:5b:fa:63:df:bc:81:ab:2e:0c:f9:26:9f:
63:86:36:69:9a:ba:39:00:d4:e6:3a:33:31:41:1a:
a4:e7:f5:cd:a2:4d:c3:a4:fd:4a:88:54:b9:97:30:
72:40:d0:3c:85:9d:b0:39:76:15:5b:2a:01:e2:55:
73:f7:fe:65:f5:ad:cd:f4:76:46:7d:76:fa:47:7c:
53:8b:83:5c:1b:0e:b0:67:3e:87:16:5f:6b:dd:70:
0c:55:14:17:76:46:11:c3:fd:78:ac:d7:00:2b:a6:
fb:54:f2:5a:fd:60:d2:c1:a4:c7:76:6e:93:a4:80:
9e:7e:d4:f6:8e:50:a0:6a:c1:92:e2:4f:8d:80:56:
f8:a8:9e:ab:d2:7e:fc:1c:2a:66:3b:38:96:95:67:
cf:16:95:35:93:9d:85:28:ef:ed:eb:22:69:58:fa:
42:48:07:b8:b2:eb:ff:af:3c:47:fd:5b:42:4f:30:
16:5d:10:b8:d0:a5:24:60:31:36:58:d8:50:47:46:
1a:8f:5f:28:24:c2:3f:3d:63:bb:a6:b9:ed:8c:c0:
d1:4b:df:97:4b:5a:79:40:a0:5e:5d:6c:70:d9:77:
9a:c8:a9:64:1b:27:5e:e1:1a:7e:13:68:c2:ec:22:
81:84:c7:0c:9a:65:df:29:24:e2:ff:14:30:f7:ae:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:93:44:3F:65:44:83:0E:ED:BF:86:B0:26:D2:2C:54:04:36:D5
X509v3 Authority Key Identifier:
keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.146.0/24
IPv6:
2001:df2:e940::/48
Signature Algorithm: sha256WithRSAEncryption
83:51:56:7b:e8:04:bd:1f:7c:28:a2:ca:87:72:19:78:54:61:
0b:38:26:29:a5:3d:7f:5b:8c:5a:1f:65:07:f2:6d:ee:da:03:
c9:ea:01:11:91:e3:50:f1:17:eb:07:d5:3c:1d:e9:07:65:66:
e8:38:4b:dd:a9:14:a9:6a:fb:72:ed:72:ff:22:a4:78:b0:f6:
6d:8b:6a:36:bb:b8:55:a3:fb:02:15:87:64:cd:5c:6d:14:47:
ac:72:b5:98:a5:ef:05:3d:9e:ee:0f:2b:08:f8:ee:36:37:13:
23:e1:b3:5c:03:59:a9:ba:b9:3f:18:db:22:60:96:74:4f:ff:
6c:57:55:8e:71:fa:80:e2:73:8c:f3:ab:81:b0:e8:0c:90:7b:
69:c0:36:b6:75:d1:54:9c:11:bf:47:16:42:c8:96:36:0f:04:
9c:e7:8a:84:aa:58:26:bf:e8:76:5f:b3:83:b5:b0:07:84:ed:
93:d2:ca:50:30:f1:6f:93:99:e0:01:04:6a:53:9e:d8:0c:96:
2e:f8:4d:a9:64:ce:06:fc:ad:04:a2:dc:b4:08:e1:2f:f5:69:
71:e9:e7:77:de:79:b9:2e:25:d7:45:02:bd:d7:0c:4a:37:d3:
f2:0e:8a:52:a4:c5:28:74:2c:fa:46:b9:27:91:58:74:a4:4e:
39:7e:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:52 2025 by rpki-client