Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
File: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (raw, json)
Hash identifier: qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=
Subject key identifier: 32:6C:72:4E:6D:79:24:90:BF:95:E4:3D:CC:CF:CF:DB:9E:FB:1F:99
Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial: 0228
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
Signing time: Wed 05 Jun 2024 04:32:13 +0000
ROA not before: Wed 05 Jun 2024 04:32:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 4826
IP address blocks: 103.188.182.0/23 maxlen: 23
103.188.182.0/24 maxlen: 24
103.188.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Validity
Not Before: Jun 5 04:32:13 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665fea4d-f0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:5b:99:6f:2d:cd:03:7d:66:f6:20:6c:0d:
5f:fb:30:5a:dc:37:8d:95:6d:ab:36:79:e0:a3:d8:
73:7c:91:bc:2f:fa:85:43:c2:4c:a4:30:00:dc:ba:
0b:fd:66:f9:99:e9:49:47:44:6a:3a:fc:2b:8d:f6:
4f:fd:92:d1:38:f2:65:8c:86:84:28:61:6e:90:20:
1a:07:ad:bf:6f:b6:c6:76:9b:9a:ae:3d:2f:f8:21:
2b:50:9c:bb:99:f9:11:03:f5:ac:f7:da:9e:e7:5e:
04:e1:02:0d:f9:87:ba:66:fe:75:ef:58:34:7a:3f:
4f:c6:8e:78:a8:18:6e:6a:e8:35:1d:07:1c:3e:c3:
24:fe:ef:0a:7c:a9:da:b9:d7:3e:b3:fb:4f:e0:8f:
f9:76:24:c7:81:c1:51:2b:90:32:a3:5a:19:df:02:
a1:14:f4:8e:b0:fb:ea:c6:cd:c2:d1:5f:89:db:fc:
c9:86:7f:3b:a6:e4:e5:97:12:e6:89:8e:fa:cb:a7:
67:24:60:0c:91:aa:ab:cc:10:d9:1e:a6:26:15:8a:
66:f3:14:cd:80:25:07:0d:3a:46:d9:58:36:ea:00:
62:21:08:d0:21:69:73:a1:1b:58:46:23:91:ce:c3:
ed:84:01:e0:6d:86:c2:f9:ac:9b:58:08:10:36:8f:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:72:4E:6D:79:24:90:BF:95:E4:3D:CC:CF:CF:DB:9E:FB:1F:99
X509v3 Authority Key Identifier:
keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/ADBF1F6EE93C11ECA5406975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.182.0/23
Signature Algorithm: sha256WithRSAEncryption
79:6c:df:df:97:49:b9:cc:43:54:94:f3:aa:71:8c:23:d8:38:
3e:af:ac:d6:93:a2:3d:71:85:72:c0:81:1c:a0:36:ef:f1:e3:
c3:da:2d:2a:ca:9e:c3:dd:3c:c5:f4:ef:5b:b5:11:bf:03:9d:
71:6d:b5:f2:b0:60:fe:36:bf:00:99:ad:8c:fe:a0:cf:7f:02:
0d:31:0d:e3:c0:7f:27:77:fa:fb:f1:a7:e0:9f:b1:86:76:20:
c4:fd:e9:2a:84:42:d2:fb:45:7b:83:6e:20:57:73:bc:58:f5:
19:0d:9d:a5:6a:d9:90:15:02:9d:3f:6e:bb:ac:7b:70:a7:5d:
10:a8:83:10:cc:2c:17:9b:b0:f1:38:7d:83:e4:3a:63:21:18:
38:cf:8e:79:54:63:cd:37:86:93:a9:13:92:6c:99:1f:7b:70:
0a:79:db:bd:10:e0:57:2f:01:4d:f5:90:c5:09:f7:9d:21:29:
56:93:ab:2d:9e:35:56:a8:1f:15:4b:b6:64:50:68:a7:8b:39:
de:58:bc:28:b4:21:1a:41:d3:c6:13:c4:f2:70:b9:ea:3f:f1:
7a:7c:bf:6a:0c:f6:be:67:6d:8d:8f:f0:2f:de:b1:bd:fb:0a:
6c:8d:9f:b9:15:81:64:82:f9:aa:63:97:ee:ef:a4:bc:ce:37:
f2:9c:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:13 2025 by rpki-client