Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa
File: C4CB04C4E2A911EBB4631960C4F9AE02.roa (raw, json)
Hash identifier: /IQosXeTs3yKI2PYcZx2uhrQ/iH7sT08Mb2D4+fQ4bg=
Subject key identifier: C4:07:81:F5:E8:89:45:C3:61:AA:18:2E:2F:11:60:91:5E:5F:D4:27
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 04B3
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa
Signing time: Fri 17 May 2024 02:05:30 +0000
ROA not before: Fri 17 May 2024 02:05:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55581
IP address blocks: 27.116.36.0/22 maxlen: 24
45.125.120.0/22 maxlen: 24
103.166.56.0/23 maxlen: 24
103.194.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: May 17 02:05:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6646bb6a-598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:7b:3c:74:9a:f1:9a:76:b2:73:87:ac:bd:
de:92:7b:92:50:9b:df:d1:75:e6:5b:a8:37:55:fa:
8c:01:4a:86:fb:28:68:c0:0e:70:e8:91:d5:9c:d6:
a4:cc:b5:3d:0b:b5:f4:5f:a4:26:00:75:95:6e:08:
9d:fe:25:28:71:c5:ac:5a:1c:41:7c:09:7a:d3:93:
12:f3:57:95:24:30:eb:7d:29:29:8a:c5:2e:77:7e:
53:e5:4a:23:5b:6b:f4:80:9b:aa:44:ad:26:9d:a7:
44:de:1a:1b:7f:fa:6a:78:88:ab:6e:85:f2:bc:21:
37:41:07:ba:6b:aa:b3:74:36:4a:5d:12:ae:d5:2b:
c8:bc:74:28:8d:a0:22:b4:ba:3f:4c:d9:c5:d1:61:
48:9d:46:4c:b0:f5:86:98:0c:9f:ee:71:16:35:4c:
94:9e:2c:6b:9a:f5:2b:e1:61:1c:19:f4:41:8d:63:
01:b1:c8:0e:40:44:c8:f2:0d:30:f2:ea:70:53:db:
de:75:f2:28:64:18:5a:33:42:b1:19:5d:55:e7:d8:
08:a1:c3:40:9c:c9:3f:89:5f:43:e1:64:cd:be:f2:
ac:9f:0d:3e:00:82:ea:cb:49:86:dc:60:0f:04:7a:
42:b9:43:33:29:22:9d:14:a2:ad:c5:f6:82:5b:0b:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:81:F5:E8:89:45:C3:61:AA:18:2E:2F:11:60:91:5E:5F:D4:27
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.36.0/22
45.125.120.0/22
103.166.56.0/23
103.194.0.0/22
Signature Algorithm: sha256WithRSAEncryption
69:f5:e3:56:82:ea:87:2d:01:0e:06:fa:70:e8:86:b1:46:8e:
1c:23:da:34:43:ab:0d:d4:ba:10:1a:b5:90:7a:6d:0a:6c:0c:
2c:89:37:34:dd:fb:fd:a9:64:45:4c:09:08:a1:64:af:e6:6a:
fc:ff:a9:57:22:6b:be:1d:db:db:ba:1b:f8:3e:c4:8e:10:a5:
c5:1d:49:8d:08:7e:f7:6a:2f:34:6b:a2:f7:97:2c:e2:89:2f:
1c:9c:f2:a1:f9:00:47:6e:3c:38:db:2e:75:89:e1:92:1d:d1:
20:23:2b:6f:64:79:9d:21:71:48:e7:40:45:9f:98:0c:e1:23:
ec:28:23:90:58:14:58:11:95:c9:33:c5:70:92:4b:3c:fe:b4:
6e:78:e1:1e:72:bc:b5:e7:b2:3d:3e:fd:3e:0f:af:a9:bb:dc:
97:67:d8:60:12:0c:f1:f5:3d:4e:26:aa:92:19:d9:1e:76:98:
84:56:ff:23:13:da:4c:02:78:70:fa:02:28:75:3f:7c:0b:c8:
73:b9:37:a5:4a:b0:b1:62:82:15:be:4b:cd:05:39:59:7e:c4:
c4:ce:ee:6d:f0:7a:5b:5e:d8:3a:a9:ec:01:70:5e:1e:3f:eb:
72:0d:3e:bb:87:c6:91:bd:d5:45:fd:b2:c1:08:40:ff:02:91:
ae:40:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:13 2025 by rpki-client