Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
File: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (raw, json)
Hash identifier: KB7PskjjZpvlmJB1Ro3HLdROD0xauXaxZy0otkkd9Bs=
Subject key identifier: BD:02:D3:CA:6B:73:DB:B7:77:5D:2C:92:96:40:07:45:0D:E4:72:B3
Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial: 0B85
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
Signing time: Mon 26 Aug 2024 14:02:27 +0000
ROA not before: Mon 26 Aug 2024 14:02:27 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 139722
IP address blocks: 103.134.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Validity
Not Before: Aug 26 14:02:27 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66cc8af3-a786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:c6:c1:50:11:ff:5f:c7:1a:9c:fe:c5:9e:
e1:91:9a:aa:32:c4:fc:79:7a:95:bd:b5:3c:6c:d8:
26:ca:72:1c:9c:76:04:81:4b:e9:5a:38:f9:0f:75:
ba:81:79:17:da:2a:41:78:90:3f:73:ea:e8:69:03:
16:22:8e:75:ea:4f:96:85:60:89:e6:06:ce:31:1a:
c3:ee:83:16:42:ec:a6:69:ef:8f:9c:93:e1:ab:ca:
31:05:e9:0f:ac:2f:d3:58:3f:d7:bf:e5:c8:0e:00:
99:f2:48:aa:22:72:f0:5b:08:55:5b:7e:1e:be:e1:
1f:71:13:9a:85:de:d9:06:84:77:2f:dd:35:59:f5:
3d:32:82:03:78:57:1d:ff:a3:d0:11:54:d9:0f:7c:
c1:23:8c:37:98:61:e1:91:9d:35:fd:2e:72:01:60:
d3:a4:84:3a:0d:b2:0e:cc:1c:d9:7a:92:d6:e7:6a:
1f:54:75:6e:91:98:dc:28:a1:fa:a0:e7:85:63:a2:
09:b4:fe:b0:94:95:04:96:2b:2a:08:e4:47:e5:e9:
e0:eb:14:07:d4:96:2d:53:65:67:c2:74:5f:29:9a:
bd:f3:de:aa:5d:8c:54:1e:97:b4:3b:9d:53:76:dc:
36:5a:13:e7:b3:21:9d:8b:ec:fb:1c:2f:e3:72:3f:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:D3:CA:6B:73:DB:B7:77:5D:2C:92:96:40:07:45:0D:E4:72:B3
X509v3 Authority Key Identifier:
keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/D376CA2E63B311EFBEFCDF10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ea:67:56:cb:0a:5c:b4:62:ca:28:da:1b:97:18:b7:ae:b2:
d2:b1:58:9d:be:b6:39:f2:de:0b:1f:fb:ca:ac:38:af:d4:76:
7d:82:6e:b2:35:c9:60:1c:89:8d:77:22:13:c1:d3:aa:83:95:
1c:22:32:0e:6c:03:09:c2:e2:f2:3d:fe:33:48:23:2d:ac:13:
be:3d:b2:68:e4:ae:a3:1c:47:b0:f8:8f:1b:05:a0:b9:32:de:
5e:b4:fb:f9:e1:36:d7:0e:56:cc:84:2f:19:b4:b9:e8:0c:47:
49:31:81:8c:7b:3e:32:9d:13:9f:b2:b4:a5:92:3e:9c:19:43:
1b:ec:e0:04:17:eb:2c:f1:d1:a0:38:bf:45:7e:93:c4:6c:86:
85:f8:ed:7a:70:f3:e1:c0:03:17:66:c3:66:82:90:04:5a:ab:
a1:0f:e1:3d:ba:bb:8a:d0:69:49:20:30:09:24:f9:42:d1:f0:
d0:fc:bb:31:38:d1:8d:4d:63:1d:88:3b:ba:75:6c:b7:33:7a:
cd:b9:72:d4:a6:42:6e:bf:a6:79:93:ad:c3:5d:8f:51:34:71:
4c:6e:bc:0d:ae:93:3a:44:93:82:48:75:cb:c7:40:79:38:50:
e2:5c:c5:37:46:43:1d:70:e2:5f:d8:d2:ce:1e:08:25:1b:f4:
87:46:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:26:02 2025 by rpki-client