Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/E4086C08BC2311EF9A445084C4F9AE02.roa
File: E4086C08BC2311EF9A445084C4F9AE02.roa (raw, json)
Hash identifier: 2FSatyOED0Xg8fw4/PC0bYUlzXZJsIqXLZTaph/05xg=
Subject key identifier: 0B:1A:0E:0D:2C:17:E1:07:95:1B:A4:73:82:2C:0D:52:7C:3A:6B:DE
Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Certificate serial: 02
Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/E4086C08BC2311EF9A445084C4F9AE02.roa
Signing time: Tue 17 Dec 2024 03:06:21 +0000
ROA not before: Tue 17 Dec 2024 03:06:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135153
IP address blocks: 103.211.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Validity
Not Before: Dec 17 03:06:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6760eaad-a036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:99:26:24:9e:ff:d3:56:29:72:0e:a5:ea:
93:d4:e3:dd:5e:9b:08:90:07:07:ea:15:f5:56:70:
32:59:47:d5:a8:4f:be:2e:c3:2d:7d:e6:77:c1:10:
0a:8e:3a:3e:5d:70:50:3a:a3:f6:a8:b5:e1:98:d3:
df:5e:6c:71:5b:8d:95:a2:b3:d1:bc:64:7b:1c:3c:
ed:11:24:13:9e:46:16:39:8c:10:28:70:65:2e:2c:
ec:16:79:22:ee:8e:e4:e1:13:83:4d:d1:13:10:5f:
86:f5:68:f0:79:fb:ae:31:ee:81:3d:b6:7f:24:e7:
d9:b1:90:a2:47:c8:0c:dd:16:a7:0e:96:13:2d:b5:
11:f3:e9:ec:8a:27:54:1a:03:fc:35:f2:5c:f4:87:
ec:0c:3e:61:be:4a:22:91:56:11:8d:f2:6d:0a:1f:
cb:a7:47:d2:5e:44:e8:32:1b:65:19:c7:1d:5c:75:
d6:46:f4:24:4f:12:1a:28:9b:92:b0:1b:46:30:84:
78:57:f9:29:bd:2e:f3:53:f7:21:59:a8:10:cb:52:
78:58:3b:c4:50:6e:1f:1b:10:49:e6:68:b5:df:b2:
c3:fc:7c:21:79:35:bb:5f:8f:34:dd:f8:34:58:0e:
c9:d5:cd:f2:5f:05:c6:c8:ff:55:de:44:8a:93:1c:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:0E:0D:2C:17:E1:07:95:1B:A4:73:82:2C:0D:52:7C:3A:6B:DE
X509v3 Authority Key Identifier:
keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/E4086C08BC2311EF9A445084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.6.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:a7:32:36:57:c7:5b:72:18:ec:9b:24:5d:f1:d2:ac:ce:c8:
fd:23:c7:c7:4f:95:18:a7:9f:52:05:1c:aa:89:e2:28:78:68:
8b:05:ae:3c:51:ad:67:4c:1c:79:5d:1e:14:5a:8b:65:58:ad:
20:96:c2:6d:0a:68:42:c0:e1:9a:25:9c:29:92:49:9a:af:e1:
60:18:93:48:07:8a:98:b0:e0:f6:2e:a3:8c:23:35:89:03:e6:
ee:84:f3:83:2e:a0:4f:fc:97:f0:3b:a7:59:b0:02:4c:8d:52:
b2:67:23:31:9f:2f:dc:33:5e:0c:85:32:bd:bd:8d:6a:b5:a9:
78:4a:df:03:a4:e2:f1:d0:1b:e6:2e:ff:09:12:2b:62:08:b7:
4f:47:28:e3:06:61:cc:ed:13:34:92:2c:4d:54:86:25:7f:76:
3d:0b:83:39:3b:0c:1c:aa:ca:0c:18:ae:9e:34:df:06:1f:9c:
3c:96:8d:b4:94:46:7c:04:7c:c5:87:91:7c:b6:d4:07:72:a6:
9c:32:62:a1:ac:b3:83:f5:df:bf:77:04:df:ac:25:8a:80:79:
ef:37:1f:2a:f4:80:8f:c2:4b:a7:bd:e8:06:22:4d:5e:0e:74:
5e:e4:2c:83:fc:90:38:a9:17:83:2a:4e:d9:ec:51:df:8e:88:
5e:a9:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:43:27 2025 by rpki-client