Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
File: 01109D481B9011EDBC68484CC4F9AE02.roa (raw, json)
Hash identifier: c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=
Subject key identifier: 52:49:45:2D:27:B2:63:4E:CA:DC:15:66:F7:34:93:1E:A4:2B:45:DE
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 01B4
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
Signing time: Sat 13 Jul 2024 04:25:08 +0000
ROA not before: Sat 13 Jul 2024 04:25:08 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 149873
IP address blocks: 103.189.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Jul 13 04:25:08 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=669201a4-bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:9c:ad:c9:d9:6a:7c:ad:7a:6b:77:9a:c6:
eb:cd:e9:f3:b4:79:58:e1:34:4d:90:c0:4b:65:5b:
67:b7:82:db:5a:86:6e:c6:8b:cf:ae:14:fc:01:12:
09:1d:39:73:78:d0:18:76:d8:b4:56:d1:7d:13:ab:
6b:56:5e:e8:e5:62:de:b3:58:36:71:8d:4d:99:90:
c3:b7:7b:1a:2f:5c:79:83:05:cb:32:96:b9:97:1f:
c8:89:a1:f4:b6:ad:e7:32:53:40:31:b8:4c:09:e5:
fe:6c:39:f3:d8:8d:17:3a:cb:5c:07:a6:ce:7d:5a:
fd:85:9a:84:95:c2:d5:4d:fe:6f:bc:2f:62:47:bd:
ed:74:9a:81:2a:72:5d:e0:34:2d:a9:45:73:f6:9e:
bb:e4:aa:00:3c:85:b1:05:a6:4b:31:af:3e:a0:2f:
4e:c0:07:17:9c:69:38:29:5f:4f:4c:be:62:61:8f:
8a:2c:9b:4c:27:69:93:2f:2b:2d:86:3d:55:de:3d:
45:84:23:37:a9:31:69:26:cd:79:18:ec:ab:be:e3:
cb:52:c7:86:9f:36:7a:86:49:76:ae:d4:5f:fa:45:
55:81:65:14:40:fc:50:1c:07:47:79:c3:c9:de:dc:
7d:c4:d4:d1:35:7d:31:7d:cd:ca:f4:ee:ba:75:f2:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:45:2D:27:B2:63:4E:CA:DC:15:66:F7:34:93:1E:A4:2B:45:DE
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/01109D481B9011EDBC68484CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2b:ff:9c:70:75:e3:e3:83:25:97:d9:9f:6a:67:3a:de:62:
32:d4:df:a6:07:c2:e6:61:d9:4e:05:77:63:7e:23:9b:da:78:
73:48:e2:96:3b:3f:65:a7:08:96:34:3c:6c:9e:42:ae:3f:87:
1a:e4:7c:64:d8:24:98:1f:c7:00:75:c9:bf:c0:8b:eb:d0:96:
45:7f:2d:75:9f:26:3c:7e:f4:3f:e6:e7:87:5b:1b:8a:79:ca:
37:e6:c1:f0:51:ae:80:be:be:df:34:b8:a1:7f:80:74:7e:83:
42:0f:d5:e7:1a:82:6a:7a:91:60:65:7e:d6:4f:c7:dc:53:a8:
1a:42:f4:fa:0f:92:b1:ad:dc:44:ab:81:29:7f:ca:f2:2a:c1:
a9:20:61:c3:6b:b5:be:22:b0:7b:77:e5:be:ac:48:03:86:34:
bc:3c:9d:9e:b2:4a:08:91:be:17:1b:c4:d6:a8:3d:a8:ab:d4:
c9:2f:07:ea:b4:a2:1a:eb:e3:43:5f:71:fb:48:5b:b8:ab:ea:
3a:cf:9a:dc:d8:7f:1a:17:69:b4:4b:48:49:65:2a:20:b8:9f:
b8:58:7d:d4:f2:8a:27:f4:95:44:5f:71:47:98:a8:4d:97:a0:
7c:bf:46:bc:17:93:bb:1b:58:2e:89:9d:44:ac:59:bb:1d:9a:
a5:86:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:45:55 2025 by rpki-client