Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
File: F23D65727CAF11ED87752A6BC4F9AE02.roa (raw, json)
Hash identifier: ofPmRPb+6TnChxIwXK9GRCM7U6NtVuFPuLONS66PJvA=
Subject key identifier: EF:F5:E1:00:6D:A8:92:33:C6:D7:E3:B9:9A:3F:FD:E5:37:2B:20:9C
Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Certificate serial: 09D6
Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
Signing time: Tue 26 Nov 2024 19:58:38 +0000
ROA not before: Tue 26 Nov 2024 19:58:38 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 40627
IP address blocks: 103.44.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD
Validity
Not Before: Nov 26 19:58:38 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746286e-d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:d8:56:f1:aa:52:e6:46:d2:82:d0:af:c6:
1d:14:bb:b1:db:74:8a:3c:50:9b:77:2c:b9:44:a3:
e7:8f:b6:e3:46:27:24:59:cd:20:d1:c7:62:c2:7f:
87:0a:ce:b2:37:70:d5:aa:b3:1e:3c:c8:de:cf:13:
e8:d0:2e:5e:0b:6b:8b:b8:c7:1c:c7:b5:aa:07:c8:
0a:72:90:db:56:11:a4:6c:af:ec:0a:22:fd:ab:0f:
f3:10:84:73:6b:6e:e3:f3:67:46:62:7f:95:88:fa:
8a:eb:4a:8f:4d:e1:22:65:ca:39:a8:2a:07:76:e5:
99:1a:45:8b:b3:21:6f:34:e6:69:7e:12:30:2f:6c:
19:d2:3e:2e:35:53:5e:e5:e0:1b:02:6e:fe:f5:61:
1f:ee:a6:c4:59:54:49:dc:5d:31:b6:cb:f0:2f:2f:
b8:3f:9a:59:79:06:6f:ba:9c:a0:41:4a:68:14:6a:
d6:fb:74:a0:fd:d2:90:e8:63:56:68:b8:27:ac:69:
22:af:f0:aa:56:5f:23:5a:b4:27:73:c5:5b:c3:ad:
b9:8d:e7:f8:57:6e:f9:2a:95:41:b1:1c:9b:fa:b4:
68:d9:6c:04:51:7e:d0:e8:08:6c:94:74:65:94:4c:
39:b9:79:fc:d6:03:18:a1:54:62:12:74:c9:4d:9d:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:E1:00:6D:A8:92:33:C6:D7:E3:B9:9A:3F:FD:E5:37:2B:20:9C
X509v3 Authority Key Identifier:
keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/F23D65727CAF11ED87752A6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:ee:2a:6a:dc:76:5e:37:d0:ec:6f:95:86:16:7b:b3:db:b4:
28:20:07:34:52:4b:fd:ee:97:1f:1f:0d:9a:ab:97:fc:83:98:
3d:c6:d7:23:5f:67:7b:e7:80:ba:0e:a9:96:d9:bb:71:8e:6d:
6e:76:f2:ad:2d:db:9e:f8:7a:61:70:d5:df:8f:63:67:6d:d6:
4d:13:08:86:2e:ec:2f:50:ab:85:6f:75:58:ee:af:d3:1c:d5:
b6:0f:94:bb:40:2f:53:c9:7a:f4:97:a9:df:56:05:5e:e2:8c:
02:56:18:ee:af:09:9e:25:0e:c7:21:c8:c6:11:af:ea:ad:16:
8a:d6:1d:8c:47:54:f4:7d:46:88:eb:5b:43:c9:10:31:35:f7:
07:a3:fd:df:ef:08:85:16:22:c1:ad:84:bc:ed:f6:51:2a:66:
67:05:ef:cc:b7:e0:ae:26:c3:58:0b:bb:c4:a8:c8:9f:75:b8:
37:10:8e:c2:ed:ad:7f:d9:58:0f:a4:61:13:e3:fe:cb:40:b0:
49:b2:d6:5e:6b:9d:f6:28:a3:59:30:10:61:b8:d1:20:23:fc:
b2:07:9a:49:b7:44:e1:64:25:ee:81:c2:62:69:85:fa:c5:ed:
62:60:0e:13:e4:ec:63:74:8e:59:c4:0f:8d:f6:78:be:10:59:
f5:32:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:44 2025 by rpki-client