Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
File: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier: XGmytRDwOJFK+CAVxSO5QMGMv4Rpfk/p6B5X1yAiLTU=
Subject key identifier: D3:CC:77:29:19:5D:3C:A6:F3:1F:D6:31:AB:9D:3E:2B:38:16:91:2E
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 58
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
Signing time: Thu 05 Dec 2024 04:06:36 +0000
ROA not before: Thu 05 Dec 2024 04:06:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140065
IP address blocks: 103.147.223.0/24 maxlen: 24
103.164.2.0/24 maxlen: 24
203.17.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Dec 5 04:06:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=675126cb-7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:76:31:7e:23:07:84:5b:ba:43:15:47:84:
c9:fa:03:88:66:79:23:80:14:16:28:38:9d:b7:77:
ee:1c:81:18:bc:51:68:1f:40:fe:ca:c2:22:51:07:
77:0b:89:a2:17:cd:7b:bc:4f:b6:a4:79:97:65:b3:
06:12:21:f0:60:4f:c5:03:7e:7e:c5:ff:f1:4f:6d:
64:95:83:ba:30:d5:e2:d8:6b:13:e1:16:d3:dc:a1:
43:d3:a6:39:fe:ee:1b:80:11:d9:cb:1a:66:2d:c8:
e1:cb:58:e5:29:65:f0:66:a9:02:4a:e6:cb:d8:ae:
5c:16:50:56:5d:a7:fc:27:84:de:b8:c8:75:40:2b:
28:4d:71:13:30:97:b7:0e:dd:dd:fa:da:96:85:47:
e5:f0:2d:18:a5:ee:7c:de:5e:93:7d:fc:4a:6c:40:
3c:44:ff:02:57:99:17:0b:fe:98:ab:59:5a:f2:88:
58:7f:05:72:28:31:bb:30:9b:f5:a3:fe:86:a9:20:
39:a1:bb:37:93:00:6b:a9:0a:c6:f7:a8:be:f4:54:
87:54:46:13:97:19:b6:a0:0c:63:50:01:27:be:bf:
d9:46:03:70:1e:07:f2:bc:a7:e5:91:5b:d4:b1:6a:
dc:88:ff:e5:2c:3e:7d:40:9f:a1:82:94:4d:7c:fe:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:77:29:19:5D:3C:A6:F3:1F:D6:31:AB:9D:3E:2B:38:16:91:2E
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/51BBEE10B2BE11EFA108946DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.223.0/24
103.164.2.0/24
203.17.240.0/22
Signature Algorithm: sha256WithRSAEncryption
22:18:87:80:80:73:57:85:71:04:bc:aa:2e:68:51:04:0d:92:
c6:e2:88:6f:96:4d:11:16:f7:e0:f4:f5:d7:c0:1d:61:7d:0b:
4e:7a:b6:98:e1:0a:a2:68:36:d4:43:8a:1a:25:f0:72:16:6d:
1a:7c:5b:be:a0:bc:14:63:21:57:4f:3a:12:33:eb:45:45:30:
b9:6e:57:f7:6f:c7:65:67:16:60:ea:83:20:f7:1a:a4:43:00:
3c:e7:61:28:10:f2:fe:d2:45:26:cd:b3:69:d0:ee:97:03:04:
e4:60:8d:2d:5b:8f:6a:3e:6c:5e:4d:11:d4:6e:f4:7b:03:15:
76:c6:cb:2d:14:d8:fd:e2:f9:dd:b8:13:0a:25:e6:48:c1:1a:
ff:3d:b8:5b:73:c5:82:55:e8:8b:7f:bf:f2:ce:06:19:c2:c4:
d4:6a:9a:bd:e3:15:5f:04:62:8c:09:5f:39:b0:1d:91:98:25:
c5:40:53:eb:01:65:ea:f3:e6:97:5d:89:32:2a:ea:c6:48:17:
51:72:ca:e1:81:9c:91:f5:8c:94:84:19:6a:65:e5:bc:01:69:
a6:a5:b6:7c:9f:e0:bd:42:3c:65:17:5b:cb:f7:e5:0d:1e:6d:
94:c1:83:df:0e:d4:d8:b2:49:2a:8d:2a:8e:f3:b5:f6:9f:40:
92:69:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:40 2025 by rpki-client