Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa
File: CAE1D9E2404611EB913D5C10C4F9AE02.roa (raw, json)
Hash identifier: Ax63BRCrGm3rOVIvpURoa8KAyGx4REQ36ZFskHiV9Hs=
Subject key identifier: 26:F7:C0:44:15:6B:86:F6:72:63:5D:A8:BA:E6:96:81:9B:A2:A8:E3
Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Certificate serial: 0CC8
Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa
Signing time: Mon 15 Jul 2024 13:56:05 +0000
ROA not before: Mon 15 Jul 2024 13:56:05 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 139302
IP address blocks: 103.141.4.0/24 maxlen: 24
103.141.5.0/24 maxlen: 24
2001:df1:39c0::/48 maxlen: 48
2001:df1:39c0::/50 maxlen: 50
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225
Validity
Not Before: Jul 15 13:56:05 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66952a75-88dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:85:e1:83:8e:9f:7f:73:b0:5b:1f:85:c1:
ec:7b:4e:41:ad:03:74:9a:00:d2:d5:3d:c3:6b:0a:
e8:40:f4:f6:ec:22:d4:65:86:38:f0:75:f1:44:03:
0e:d0:e1:a6:69:93:2a:cb:68:1a:86:57:79:d3:09:
34:98:77:74:e5:28:f6:77:07:57:59:2a:6d:19:e5:
ff:c7:db:ea:ef:dd:55:82:3d:c5:bd:c4:6b:d8:85:
30:a6:09:bb:11:63:46:15:90:cc:d2:ea:79:fb:19:
ad:3f:db:ce:34:52:23:77:b8:3b:9a:32:0d:f5:13:
00:ab:80:0d:04:97:68:2c:4b:d9:b9:af:07:c0:a7:
e7:73:c1:b3:31:69:f7:15:23:ae:3a:3e:e9:24:8f:
d6:5c:cc:2d:64:a4:41:17:e3:26:e8:14:ae:50:a2:
bb:f3:45:46:4e:a6:9a:9a:28:1c:d8:32:f0:05:3f:
fe:31:9d:1d:c9:b2:16:57:d2:26:ca:35:45:8e:c7:
0f:af:80:98:be:68:10:60:18:a1:dd:46:19:f4:65:
8d:ff:62:81:2f:ad:a2:b4:e1:3d:a8:9a:d9:a1:74:
2f:a9:bb:32:30:0b:e2:6c:24:d8:76:f6:33:bd:21:
15:f0:bb:05:ad:87:b4:e3:94:92:63:f9:cc:b7:d9:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F7:C0:44:15:6B:86:F6:72:63:5D:A8:BA:E6:96:81:9B:A2:A8:E3
X509v3 Authority Key Identifier:
keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/CAE1D9E2404611EB913D5C10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.4.0/23
IPv6:
2001:df1:39c0::/48
Signature Algorithm: sha256WithRSAEncryption
9c:c3:9d:b7:4e:f4:cc:e3:0c:45:4f:f3:4b:e5:75:b2:00:9e:
33:48:03:80:1c:b9:a2:2d:8f:92:34:65:46:d3:3d:7f:3b:24:
b5:f5:a5:2f:01:f4:e7:09:35:8f:e3:3c:82:6c:a3:ef:78:81:
d7:a3:f7:f7:71:c9:b3:64:01:08:ad:8e:4a:8c:72:e4:3e:b2:
f5:48:8c:be:2a:e3:e1:ad:16:3f:a9:60:96:c0:2f:2f:40:98:
40:9d:87:44:6f:b8:69:ce:0a:91:b3:a9:01:8e:f8:81:77:e2:
e3:32:ca:b2:83:d6:3c:0c:ea:05:6e:63:a8:31:71:c1:bf:ad:
03:71:6a:de:3b:d0:b3:34:67:ab:da:47:db:e2:15:8e:0b:ef:
86:b4:ab:42:e1:06:c1:d1:3c:f6:5b:53:b4:97:84:f9:40:5a:
eb:7f:df:1a:65:11:7c:1a:cc:4f:2d:72:c5:0a:4f:c4:22:35:
51:26:86:2b:32:6a:ea:51:2c:08:5e:24:b4:9c:7d:7e:a1:04:
bb:e5:5f:44:b7:34:2b:99:05:33:4a:fa:1e:ef:7f:46:c2:f7:
19:50:12:cb:24:c0:97:ec:db:f9:52:79:fa:42:cf:46:3e:b3:
ac:0e:27:97:50:68:fa:6b:5b:80:70:9d:57:96:c3:cd:52:0b:
4b:f7:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:20 2025 by rpki-client