Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
File: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (raw, json)
Hash identifier: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=
Subject key identifier: A3:C9:C6:A5:85:ED:82:F5:0C:A5:BA:50:3D:FD:5E:B3:80:21:A4:17
Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial: 343E
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
Signing time: Fri 04 Oct 2024 15:21:20 +0000
ROA not before: Fri 04 Oct 2024 15:21:20 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140955
IP address blocks: 103.136.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13374 (0x343e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Validity
Not Before: Oct 4 15:21:20 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670007ef-fc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:0e:6a:d3:5d:ed:ea:1c:a4:a8:ca:01:b7:
c4:b8:fa:f5:c6:af:c2:97:7b:7a:98:d1:dc:89:17:
68:ca:74:aa:82:7f:5b:15:de:10:5a:13:24:9a:20:
c6:58:3e:16:cc:cd:db:5a:44:6d:26:e7:0c:f8:a2:
0d:05:96:c2:9a:f9:e8:19:13:6c:67:e6:9b:6a:1e:
95:2e:25:04:66:2e:70:23:fd:8c:25:84:21:e6:2d:
1c:65:cc:7d:74:15:38:a5:86:80:0d:27:ba:60:e9:
f1:ac:f8:cc:5d:b1:69:23:b8:63:fe:cc:1e:71:8b:
fa:00:db:08:a8:18:d1:f3:f9:b6:4f:7e:06:5f:0d:
c6:01:86:9e:3f:fc:7c:0f:86:3a:2d:b5:1e:88:90:
2f:cc:b3:fd:37:63:af:d5:71:49:f3:3f:95:51:0a:
6a:a1:e6:f5:00:73:a9:1e:d6:70:5d:4c:65:0d:5b:
9c:5a:80:f8:3d:dc:7f:05:01:70:1a:b1:2f:69:80:
b5:9a:f3:84:66:b7:2c:2f:0a:68:e3:9b:71:ce:e7:
16:4e:35:48:f9:fb:4d:52:5a:8c:4a:a0:9a:ce:09:
a2:86:9d:76:c4:91:06:ae:f3:86:0e:ef:d9:17:ac:
5e:37:97:2b:c9:db:6d:13:02:e1:5d:b9:b8:b3:49:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:C6:A5:85:ED:82:F5:0C:A5:BA:50:3D:FD:5E:B3:80:21:A4:17
X509v3 Authority Key Identifier:
keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.123.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b8:c5:58:27:80:45:a9:23:7c:74:42:cf:12:95:b0:0c:0e:
d7:0c:14:a5:3f:4a:21:e7:47:4f:8f:e2:f1:73:30:1c:2e:a1:
8e:70:9c:ed:7c:45:73:ba:cb:e7:bd:55:cd:84:1d:b9:53:c2:
3b:e8:18:ca:bb:42:1c:8b:9f:71:3e:d3:55:ff:bc:f1:83:cd:
ba:0c:1f:61:8d:52:e3:45:2b:2e:bc:56:4f:cf:24:70:3c:65:
cc:a9:28:3f:20:92:33:ab:11:99:8b:d9:ca:6b:6a:a5:66:ca:
c3:83:3b:ae:98:63:2c:35:82:44:d1:96:29:34:b7:9c:7e:9e:
9f:07:69:d6:6b:d4:6c:75:48:36:2d:bb:d5:bc:af:3b:13:1d:
e9:51:5d:71:9f:88:ce:3d:3f:12:e2:f5:32:25:a0:9c:82:17:
bd:23:53:3d:be:e9:09:03:c2:ec:3e:c9:b3:64:76:72:66:a7:
5f:6e:39:51:63:50:0b:90:ee:c4:2d:90:e1:32:b5:d1:e7:ef:
36:da:33:8c:6f:3d:39:75:30:29:53:74:d1:ad:9f:7e:c3:d1:
3a:fe:b9:8a:ef:90:e7:78:6b:df:24:59:92:01:bf:be:e8:c8:
d5:0e:46:01:1d:e7:8a:aa:65:31:89:8a:9b:b8:8e:76:07:55:
e1:91:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:01 2025 by rpki-client