Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
File: D831B39ED77311ED949D8419C4F9AE02.roa (raw, json)
Hash identifier: 9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=
Subject key identifier: CC:A1:3A:BC:6F:30:26:58:75:6B:01:C3:36:C5:08:83:BC:0F:3A:44
Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Certificate serial: C4
Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
Signing time: Fri 19 Apr 2024 06:08:58 +0000
ROA not before: Fri 19 Apr 2024 06:08:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151057
IP address blocks: 103.122.206.0/23 maxlen: 23
103.122.206.0/24 maxlen: 24
103.122.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Validity
Not Before: Apr 19 06:08:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66220a7a-ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:4c:dc:11:ea:ef:a4:4a:52:a9:09:5e:17:
f7:16:05:23:cd:20:83:8e:d4:7b:96:3d:8c:51:cd:
98:61:d4:ca:c8:75:6f:57:ef:12:fa:23:68:09:fe:
33:1c:9d:06:d0:db:94:ae:22:03:41:78:91:3e:7a:
34:f2:f2:fc:51:af:40:3f:ec:31:86:b8:22:44:84:
fe:06:66:5d:1f:b3:15:1a:22:cc:48:c7:0a:2d:54:
29:00:43:87:6b:59:8e:10:7c:ec:87:df:32:33:8a:
82:f4:31:8b:aa:a3:e8:b8:33:ae:40:96:ec:06:8c:
60:b2:92:56:83:2e:e0:63:c9:84:0b:ee:64:7a:19:
de:b9:76:35:26:13:ba:79:52:0f:a8:6c:76:df:ad:
4c:ea:80:5f:c1:c6:ae:84:c9:69:d4:ae:a6:42:9c:
06:0d:2b:6b:bf:68:30:c1:37:72:a4:6a:69:3c:1d:
77:d4:55:7c:f7:bb:61:80:bb:81:f0:24:0d:d9:bd:
a4:c2:2b:97:5f:2c:25:7e:f8:0e:6b:50:91:a8:59:
b6:9e:85:41:bf:cc:2e:5d:7a:f5:f0:ac:ea:ce:e3:
a6:7f:14:e4:96:c1:dc:75:1e:f3:0d:b9:b5:b2:5f:
82:cb:5c:57:91:6f:1d:8b:34:33:a9:37:13:86:ee:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:3A:BC:6F:30:26:58:75:6B:01:C3:36:C5:08:83:BC:0F:3A:44
X509v3 Authority Key Identifier:
keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/D831B39ED77311ED949D8419C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.206.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:01:17:52:25:80:01:20:85:ca:65:38:57:c8:a2:f2:2e:de:
f6:94:a9:db:3c:ea:6c:fa:4e:bf:ab:99:46:c7:4e:bc:ed:bf:
f2:76:b7:f1:84:3c:5c:9c:51:f5:43:5d:6f:93:0d:52:ac:13:
70:bb:27:d0:b9:fc:83:35:55:06:6e:d4:44:93:44:45:d7:a4:
0b:2d:8e:29:95:ec:56:1d:23:d7:d2:35:ce:54:b2:5a:36:97:
3d:68:67:41:c9:4d:11:07:ae:11:47:d6:65:6e:2f:a4:09:73:
ef:88:aa:0f:7f:09:c4:65:d8:f1:c5:8e:f2:a2:3f:1b:77:0f:
85:07:f5:7c:fa:2b:12:6f:a4:d7:59:2f:9a:b8:a1:11:0b:5d:
03:69:33:60:de:7d:6a:53:d7:65:76:da:9f:96:73:17:03:91:
42:c0:71:b7:4d:19:a2:c3:9b:aa:c0:7d:dd:32:96:f7:b5:67:
cf:f3:e4:4f:a0:8d:84:60:03:8f:78:82:8c:13:74:0f:38:51:
03:c6:5c:e3:26:69:06:f1:23:05:d6:03:6a:a5:ba:5d:07:25:
a3:c1:f8:60:67:00:63:26:cf:6e:52:9e:4c:b3:fb:81:a6:57:
7c:ae:e8:44:5a:c7:03:1c:22:df:73:53:45:a2:27:15:8b:e9:
1d:b3:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:28 2025 by rpki-client