Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
File: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (raw, json)
Hash identifier: JsSR5Xyiam1gqDW8LZ3p6vMD1Unh1jWG06vXX1Pt4OE=
Subject key identifier: B1:87:44:38:34:CD:CE:9C:C2:C3:E0:65:F2:ED:15:02:36:13:72:26
Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Certificate serial: 186D
Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
Signing time: Wed 02 Oct 2024 16:54:20 +0000
ROA not before: Wed 02 Oct 2024 16:54:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136937
IP address blocks: 103.99.128.0/22 maxlen: 24
2401:aec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6253 (0x186d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Validity
Not Before: Oct 2 16:54:20 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66fd7abc-b301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:50:6b:94:70:84:eb:4c:39:b3:1b:34:f2:
30:75:5f:8e:9b:e6:88:ba:95:f7:df:b1:71:2f:64:
b4:3f:e1:15:a9:9b:ed:83:51:b4:d1:c5:a4:16:de:
7e:57:91:67:be:f9:3b:b7:64:09:d8:ac:56:05:ad:
74:40:d0:c9:5c:d3:67:b9:11:2d:d9:5f:70:e9:22:
79:34:47:fd:c9:e2:dd:d9:51:6d:e7:b9:6d:d4:67:
70:87:80:76:fa:75:56:74:16:0e:6d:0e:c0:74:81:
1f:3d:b4:e4:7a:2d:68:3a:16:af:12:0b:e6:c9:a4:
58:d2:ed:39:8c:7a:55:19:24:b3:85:ef:54:e6:25:
68:5a:96:48:6d:36:8f:af:ad:ab:52:64:01:a7:b9:
56:e8:88:cf:d9:47:e4:ae:3f:26:e7:d0:7a:06:70:
fe:ad:73:0a:7f:6f:3f:8c:bf:5a:f7:c0:7e:11:dc:
79:4f:7a:74:a6:33:10:b9:75:60:2e:22:d6:9e:1b:
0e:f0:4a:5a:3c:3d:b4:6c:ea:af:b8:cc:c8:08:b0:
2c:ae:3d:df:28:f0:20:ed:58:e0:5f:8a:68:12:49:
d2:fe:35:b2:48:29:99:16:4f:13:d7:fe:00:58:1f:
d9:7e:b7:39:6b:66:9c:2c:a2:36:87:21:8e:22:26:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:44:38:34:CD:CE:9C:C2:C3:E0:65:F2:ED:15:02:36:13:72:26
X509v3 Authority Key Identifier:
keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.128.0/22
IPv6:
2401:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
07:01:50:62:98:15:f7:5e:4c:a2:de:15:90:db:3b:b5:b7:11:
cc:eb:6f:1e:c9:e4:bd:de:79:4b:2c:b1:fe:5e:ce:40:e4:30:
f7:45:f8:fa:a2:31:7b:7e:8c:73:57:84:27:bf:5a:d4:43:fa:
e7:ca:db:e0:95:49:6a:75:0e:52:cb:31:4b:c7:c5:33:bc:3d:
c0:ad:5e:b0:84:4d:b1:09:c1:1f:0d:9e:b1:c4:e9:db:88:a9:
4a:b0:3b:e7:4b:6f:32:d8:35:47:fc:1f:e8:99:19:db:f1:0c:
10:6d:e6:43:45:eb:7c:e9:e6:1b:78:0d:07:e5:cd:6a:8e:8d:
62:10:20:b5:13:47:be:3b:3c:7d:51:e7:1e:44:11:fd:43:97:
c4:13:0b:5c:03:4b:29:02:7d:51:6a:fd:5a:d0:d8:6d:cf:95:
90:46:62:9c:b0:c4:f1:43:56:40:05:dc:a9:cc:5c:e0:a7:df:
7f:7c:3e:10:60:05:ec:34:cc:74:05:0d:18:bb:fe:32:70:92:
f9:c8:17:f9:06:3c:8d:58:01:55:4e:5d:e9:89:e2:c6:83:2e:
fe:84:9d:12:1d:f9:9f:e6:69:06:9e:42:c0:64:f6:a8:e1:51:
7e:18:17:6c:ae:41:96:68:ec:02:00:1d:bf:b4:90:b6:b6:ca:
11:7c:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:13 2025 by rpki-client