Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
File: 280B8550FD3611EEB7932778C4F9AE02.roa (raw, json)
Hash identifier: k6THokNNgkgErJRrYrousZIlobYn3ymk37svdAyXZD0=
Subject key identifier: B3:25:78:3D:A5:2F:77:F3:C7:EA:EB:FD:E1:38:A3:8E:A2:F7:ED:CB
Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial: 032F
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
Signing time: Tue 03 Sep 2024 02:45:30 +0000
ROA not before: Tue 03 Sep 2024 02:45:30 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 142615
IP address blocks: 103.170.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Validity
Not Before: Sep 3 02:45:30 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6784a-19db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:a8:50:db:f8:37:0a:f0:35:23:d7:cd:cd:
4c:6f:28:20:34:70:2c:ef:6b:d7:6e:f4:b0:c7:2d:
c0:06:95:ed:b7:88:ba:03:15:c1:80:76:6e:86:50:
cd:80:3d:ab:08:1b:0d:3e:a3:dc:0f:ae:20:c6:4f:
82:d0:00:31:4b:24:f1:60:4c:ee:35:82:7c:4c:51:
71:23:51:5c:41:e1:1d:5d:8a:49:05:0b:c0:4e:0d:
2c:fe:54:8c:58:7b:14:1e:3d:d2:13:2e:2e:ad:53:
a1:63:72:f6:d5:34:52:d7:06:1d:d6:4a:6b:75:d2:
83:9d:fc:a3:34:19:d7:d6:d0:86:5f:8a:26:88:da:
26:2e:76:93:2f:1a:c5:28:76:e4:9e:1f:fd:1f:f3:
ae:1c:7e:29:6e:1b:30:cc:26:50:24:9c:f2:f1:e8:
29:7e:3d:43:76:82:82:84:1c:25:d3:75:2a:9d:5a:
c0:52:b2:42:78:47:ac:d4:73:2e:42:05:8a:66:fa:
4e:4a:2e:de:46:da:62:8d:57:3c:b4:4e:e8:a0:50:
2b:7e:17:49:f5:25:24:32:ea:e4:b0:30:0a:67:1a:
35:e8:cc:35:93:03:6a:a3:91:ea:10:46:19:a1:eb:
28:24:a1:23:be:35:4b:43:9d:c6:a4:e8:94:82:bd:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:78:3D:A5:2F:77:F3:C7:EA:EB:FD:E1:38:A3:8E:A2:F7:ED:CB
X509v3 Authority Key Identifier:
keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/280B8550FD3611EEB7932778C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.231.0/24
Signature Algorithm: sha256WithRSAEncryption
43:25:f3:ac:9a:d2:0b:4a:e3:48:81:f5:92:ff:a8:56:3e:49:
54:26:87:66:2c:d5:a5:21:ea:24:5f:5b:bf:0c:1b:b5:03:30:
92:5c:28:f0:07:6c:ed:ca:c3:77:d6:92:38:08:f1:b9:95:d9:
d0:c3:5e:ad:a8:71:1c:92:8a:07:d2:0b:72:98:75:75:81:2b:
a9:e7:b3:9e:05:b5:ef:9f:ca:01:9a:ef:e5:2b:f3:8a:b4:e3:
ef:42:fc:5e:af:c3:cd:e7:d4:6b:6d:f6:60:8c:31:72:1f:d9:
ad:ae:a5:09:99:49:6e:aa:9e:08:ff:66:94:ac:0a:a0:f4:bd:
9a:49:63:ee:85:1b:2f:a1:65:82:77:f1:bf:e1:3d:68:01:98:
52:98:e9:3f:88:1f:40:cf:1e:b9:b9:af:0e:67:11:1f:cd:42:
08:d0:88:e0:17:f6:ca:d7:21:2a:0e:04:61:10:03:2f:27:eb:
e6:bf:c0:ce:ac:48:72:48:fc:d6:f6:03:35:8a:df:eb:9e:1e:
be:c4:f0:00:57:82:b3:25:65:98:3f:fd:67:05:8a:7c:dd:a1:
09:94:52:f7:51:25:27:cc:ee:c1:1b:c3:76:85:bd:0e:81:e4:
44:7e:75:9d:72:74:00:ea:fd:33:95:b3:8f:86:6b:e6:00:d8:
f4:41:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:59 2025 by rpki-client