Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
File: 5915642864AB11EEBFD54F2EC4F9AE02.roa (raw, json)
Hash identifier: L+aUrfi/IHEm4FCCzrEf6AdJOcO/5KYjXAI+VHu0xCQ=
Subject key identifier: 66:2E:FE:58:83:CE:47:FA:C7:51:F9:B2:99:DC:F2:07:00:65:20:4E
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0E01
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
Signing time: Wed 04 Sep 2024 18:36:30 +0000
ROA not before: Wed 04 Sep 2024 18:36:30 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151627
IP address blocks: 103.5.0.0/22 maxlen: 22
103.5.0.0/23 maxlen: 23
103.5.0.0/24 maxlen: 24
103.5.1.0/24 maxlen: 24
103.5.2.0/23 maxlen: 23
103.5.2.0/24 maxlen: 24
103.5.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3585 (0xe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Sep 4 18:36:30 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d8a8ae-f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:7c:95:60:af:db:76:0e:0b:cf:69:1f:8d:
9d:f0:66:f4:eb:59:fd:37:80:21:e7:5d:9a:85:1b:
ce:ee:79:f7:4f:a3:75:09:a2:33:07:08:e6:f0:a5:
3e:fe:be:a6:41:f3:4c:aa:b6:44:9c:5e:a3:72:67:
80:db:28:28:44:3b:a7:27:ca:ef:11:43:ca:f6:dd:
3f:cf:ed:16:1e:b5:c4:45:65:6a:83:71:30:e4:19:
1e:18:fa:14:b7:f6:1f:68:f8:60:4d:05:93:60:8e:
f7:a9:e8:df:52:c0:3f:aa:e7:2f:aa:67:84:d0:85:
11:79:54:2e:11:d8:26:3d:f8:68:36:91:b1:5c:6e:
6b:47:13:6c:96:91:23:c9:b6:01:11:51:ae:27:2c:
12:d1:f3:20:18:13:07:30:4b:a9:99:a5:95:6f:b6:
45:34:38:b4:95:5c:b4:7c:d2:e4:37:78:86:2d:cd:
3f:6a:8b:e2:5f:e4:6b:2c:23:dd:d9:f9:4a:b2:12:
64:3f:46:0e:d8:93:8d:34:75:9d:af:b7:fb:c7:f3:
c5:99:57:65:72:57:5c:82:f1:f5:0f:eb:15:6f:9a:
fc:2c:d1:b9:55:42:0a:c6:ec:a6:07:ac:ad:98:a7:
24:59:24:48:ae:d9:d6:e7:fb:5f:81:88:b4:02:48:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2E:FE:58:83:CE:47:FA:C7:51:F9:B2:99:DC:F2:07:00:65:20:4E
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/5915642864AB11EEBFD54F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3f:37:47:5a:fd:5f:c3:85:fb:ef:ca:46:2a:57:fb:52:38:
7a:c2:82:4f:2d:6f:73:8e:86:94:50:ba:66:8c:17:81:bd:a3:
90:a1:c1:c6:ab:fd:b8:5b:8c:25:e5:df:dd:1c:3b:1d:02:3f:
d8:72:9f:b5:d6:4e:a6:ee:87:8a:a6:c0:39:01:c2:95:af:ab:
b1:7b:19:c1:c2:cc:df:f7:75:a7:c1:eb:a8:ad:2c:62:50:8a:
75:7a:6f:e8:a2:73:b4:e5:e2:ac:ca:cf:6a:b0:d9:c3:57:0d:
a1:71:55:8e:10:e2:19:d0:86:cb:86:8f:1c:98:3d:30:16:22:
8e:03:4c:04:cd:ad:72:7e:99:12:ab:db:2d:06:32:17:3a:e1:
54:47:a4:08:cb:6d:d2:2a:ad:b8:da:99:be:a4:24:ea:47:00:
ed:30:64:31:dd:25:aa:bb:23:31:a7:42:58:08:a9:c3:15:39:
e2:ea:c5:8b:c1:f5:bb:38:9c:e7:7b:8c:96:26:38:94:79:e4:
4f:ef:22:96:28:9c:f3:bf:48:5c:aa:e6:c8:48:0d:a9:a7:50:
ff:9b:73:82:1f:f0:f6:04:45:87:b9:19:16:c2:c2:13:08:e9:
73:bd:8e:f9:67:8e:94:18:eb:a8:aa:0d:aa:8c:70:83:3c:c5:
2e:d1:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:18 2025 by rpki-client