Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa
File: B377200E5ADD11EF9A462440C4F9AE02.roa (raw, json)
Hash identifier: ku0nQgImAfjqlfmOWSwIKN/zsrk6kYnMycZSjI2lh3o=
Subject key identifier: 17:8C:3B:44:B5:3A:DE:6A:39:50:C3:3B:7C:6B:34:F0:F1:A1:51:20
Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Certificate serial: 3B
Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:49:43 +0000
ROA not before: Fri 29 Nov 2024 05:49:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.197.192.0/22 maxlen: 22
220.158.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Validity
Not Before: Nov 29 05:49:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674955f6-ccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:94:0c:f4:a6:ee:1f:aa:90:82:96:b2:aa:
e6:61:73:72:c1:d0:55:ac:f5:7f:4a:ff:30:b4:97:
bf:ca:61:50:cf:27:c6:31:ca:ef:9b:87:e9:41:2d:
c5:69:a8:2f:a1:36:3f:56:91:cd:03:cc:74:ee:41:
5d:44:67:ac:ad:0b:0e:e0:6c:32:23:0f:ce:f4:2d:
13:fa:ff:47:30:b1:91:61:26:78:49:82:99:29:5f:
31:62:3b:29:3b:24:10:85:cf:56:fc:e8:cf:fc:95:
79:0c:a7:54:c5:87:4e:d5:b9:37:c0:4e:e8:af:ec:
0f:0a:42:f2:dd:c6:d2:d6:a7:6b:96:de:4f:1d:f4:
97:a2:9e:41:69:44:b5:8f:a0:d0:be:04:64:c8:33:
43:44:47:8f:38:0c:b6:9b:40:89:3f:45:bf:aa:29:
e9:8a:b8:4f:1d:d8:41:07:e0:3a:ff:4d:ff:95:19:
11:24:d2:52:03:2c:79:e6:c4:f6:51:29:d1:1e:e3:
14:9c:ce:3f:86:f4:b3:19:e7:61:dc:ef:c0:53:27:
f6:1a:1d:23:8a:e3:2c:81:97:36:30:48:46:00:15:
7a:1d:3d:ac:55:ec:53:8b:fc:e2:2a:71:a5:2b:c9:
fb:c9:1e:5d:5e:ff:b0:5f:da:1d:cb:fe:7c:17:af:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:3B:44:B5:3A:DE:6A:39:50:C3:3B:7C:6B:34:F0:F1:A1:51:20
X509v3 Authority Key Identifier:
keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/B377200E5ADD11EF9A462440C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.192.0/22
220.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b8:b9:01:a5:ee:d1:ba:a2:ec:a4:80:c2:9f:99:c2:63:a2:
9f:a8:6a:70:10:f8:c5:33:7e:96:d6:6c:6c:5c:ce:c0:08:a7:
50:58:d7:ea:dc:8f:ed:c9:f2:73:82:16:3e:16:36:26:f9:89:
5a:93:76:44:c2:83:24:2b:f2:d3:d1:39:94:8d:22:d2:38:cb:
6f:50:94:2b:94:22:2a:8c:34:10:b4:19:26:c3:87:1e:52:b7:
b8:b7:55:ae:bb:2c:49:83:60:df:e5:db:03:da:8d:cc:ce:ab:
35:df:bf:37:17:45:6d:c4:41:b4:21:eb:0c:74:1e:c9:e3:fc:
23:cb:d3:5e:32:92:e7:54:ec:09:32:9b:94:ae:42:f0:d0:eb:
60:ee:b0:9b:ee:ce:69:85:12:58:97:25:07:12:1c:b4:d7:07:
30:25:31:84:f3:e5:c5:07:92:62:0d:6f:46:a9:bd:93:9a:cd:
02:a1:02:b1:08:2a:a6:a6:77:f6:d9:58:36:b8:d3:46:08:3c:
05:99:08:79:01:15:9f:08:e6:4b:d5:a5:10:16:a8:a9:4f:b9:
03:c7:a7:80:33:5d:83:a8:af:d8:e9:42:b5:7c:83:76:54:c3:
5f:ac:54:a7:03:a7:6b:52:89:0c:d7:4a:87:ba:3f:09:db:de:
6c:23:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:09 2025 by rpki-client