Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
File: B2790B3C2FB111EB89A04D37C4F9AE02.roa (raw, json)
Hash identifier: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=
Subject key identifier: 4F:A6:2C:58:5A:20:46:4A:31:38:CD:97:C7:E3:A4:77:A9:54:9F:4F
Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial: 06B0
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
Signing time: Fri 06 Sep 2024 23:11:58 +0000
ROA not before: Fri 06 Sep 2024 23:11:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 136977
IP address blocks: 103.141.210.0/24 maxlen: 24
2001:df1:1080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712 (0x6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Validity
Not Before: Sep 6 23:11:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66db8c3d-f3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:26:73:95:f4:69:c0:26:ec:68:39:e2:6d:
ab:0b:c6:12:6b:1f:ef:14:64:0e:51:f5:7c:42:ac:
cd:39:2c:bf:13:23:51:d6:25:3f:9f:f6:73:ae:2f:
a5:17:30:3f:e9:2b:c0:ec:36:62:87:bc:f6:6d:1e:
b9:ea:b7:9d:e2:59:83:b7:a7:ab:33:6f:8d:36:dd:
25:2a:82:f6:85:07:ef:ba:a7:71:99:19:75:c8:70:
cb:99:2c:4a:10:8f:dd:13:46:b5:f6:c0:2c:17:72:
a7:33:2d:b9:66:ca:cb:8d:fe:1a:9e:4e:db:d7:c2:
e0:91:f9:43:f4:37:75:c4:ad:1e:4b:43:96:a2:51:
69:76:3d:23:c8:a0:70:e0:da:6e:3e:43:67:3c:da:
c0:1e:5e:59:4b:00:fc:79:ca:be:f1:56:71:98:c0:
04:39:9d:83:e7:cf:e9:8f:82:6c:72:fd:f0:5e:4c:
00:b3:48:68:1a:c8:0a:c3:a1:59:2d:89:d2:8e:55:
cf:ee:70:af:5f:d6:03:9d:c7:4f:f8:89:65:1b:61:
8e:8b:54:ee:83:d1:99:68:8c:2c:32:4a:44:01:9d:
fe:ea:c6:6b:ae:39:b2:df:ee:51:53:9e:7a:f7:70:
73:6e:3a:75:af:27:07:6c:73:87:02:74:be:4c:aa:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:2C:58:5A:20:46:4A:31:38:CD:97:C7:E3:A4:77:A9:54:9F:4F
X509v3 Authority Key Identifier:
keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.210.0/24
IPv6:
2001:df1:1080::/48
Signature Algorithm: sha256WithRSAEncryption
07:66:9c:c7:60:de:ab:49:e5:42:ad:5e:eb:52:60:dc:31:35:
74:4f:c4:5b:a0:74:0c:7b:cb:d4:63:1b:38:2d:5c:29:32:8b:
a5:4b:ec:20:d3:fe:2c:c0:d2:ab:91:f4:24:ae:f5:01:3f:7d:
68:0f:7c:ec:e8:2d:99:ac:95:5d:1f:01:b4:c9:bd:5e:e0:81:
f8:9f:ba:55:7d:29:f1:85:a9:91:e0:f2:48:a5:04:90:98:ae:
6e:23:90:26:b1:fd:0a:dc:33:33:8d:da:df:58:5a:2a:4b:fe:
96:37:32:62:f3:8d:9e:10:04:78:33:27:6a:88:09:7d:35:19:
16:59:58:77:b9:17:a5:62:76:d9:79:50:94:dc:b2:44:4a:3f:
8f:48:ee:f7:08:40:7f:44:cc:9b:7f:ba:8e:19:64:91:7d:a6:
f9:8c:9d:54:01:ca:05:ee:d0:29:7f:ae:cd:ec:af:0a:e0:a2:
87:2d:d0:92:d6:d9:9f:38:cf:da:e5:0e:3d:93:8d:01:33:76:
07:ec:e4:76:52:88:2c:3f:31:86:3a:f5:77:cc:87:29:b7:f5:
28:8c:5a:d3:c6:c8:24:c7:21:a2:42:49:b6:9e:2b:14:98:b5:
8b:8b:2a:cb:ce:d8:37:5a:0d:e3:da:59:d1:72:c6:6d:eb:0f:
3a:31:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:07 2025 by rpki-client