Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa
File: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (raw, json)
Hash identifier: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=
Subject key identifier: 0A:A3:F1:EA:CE:8B:9A:1C:FE:AB:65:73:11:FA:81:DB:98:9A:25:BC
Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial: 3B
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:50:06 +0000
ROA not before: Fri 29 Nov 2024 05:50:06 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.4.24.0/22 maxlen: 22
202.14.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Validity
Not Before: Nov 29 05:50:06 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6749560e-d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:62:4a:65:0d:67:f1:04:a5:50:60:f3:25:
b8:3a:ca:77:08:18:fd:41:bf:af:3a:f5:45:97:91:
59:80:96:aa:10:6d:86:c1:f2:ef:f8:fe:ea:2a:80:
11:a3:40:7b:e5:d0:6f:8e:03:57:a0:b2:1b:23:f0:
3c:e4:8d:67:80:b6:fe:d1:41:7d:b9:e4:df:6e:f0:
ca:fc:55:74:7d:f5:7f:2f:b7:cf:ad:3c:31:85:86:
44:ae:78:70:c0:d4:e0:c7:c7:40:83:2a:96:78:c4:
da:07:e3:b6:ed:44:5a:2c:16:5f:9f:ff:8e:ea:e5:
a0:3e:dd:64:20:e9:02:24:39:bf:6f:e4:80:f4:33:
8e:d4:f2:3a:70:cf:dd:e6:8e:8f:8c:7d:24:51:02:
2a:4d:7e:e1:6a:e5:2e:97:0c:18:2d:c7:70:31:69:
6c:17:7e:94:37:6a:44:0c:9f:30:c4:ac:16:d4:e7:
f3:e7:9c:ac:c7:22:db:da:aa:a5:2a:05:74:3f:58:
e8:f8:12:66:e2:a7:07:46:97:89:78:80:85:34:7c:
7e:16:9f:db:59:6e:c1:56:6e:d7:1f:6c:6d:5d:16:
69:b7:61:7c:76:c7:54:ef:a2:e6:69:0b:ae:17:45:
95:03:36:d9:19:be:c6:db:59:76:8d:e8:e9:8e:bf:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:F1:EA:CE:8B:9A:1C:FE:AB:65:73:11:FA:81:DB:98:9A:25:BC
X509v3 Authority Key Identifier:
keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/1F3782EE5AE211EF8E82D12DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.24.0/22
202.14.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:50:6f:82:3d:03:b6:e3:02:7a:80:ba:50:7f:37:f6:2a:0a:
b7:4d:b1:52:c8:1e:ae:13:b6:0d:15:16:73:96:cb:09:74:63:
36:59:0d:45:45:b0:25:30:8a:82:a7:b9:1c:d9:b2:b7:a3:a3:
8d:0e:e4:13:d8:cf:11:bc:26:71:6e:61:24:90:f9:36:b1:13:
83:8b:0a:53:8c:86:c0:23:6d:a6:ae:47:67:5a:d4:6c:55:ef:
14:14:c6:b2:ae:ad:cd:11:78:88:89:2d:03:a4:15:3d:ff:76:
4c:19:b2:8f:96:0e:23:2a:95:5a:3d:21:3b:b9:47:49:7c:36:
58:b8:35:7b:d8:cc:8c:08:e7:b7:09:9e:ba:a5:9e:aa:61:b4:
d2:05:ad:35:8c:07:1b:23:31:fc:8b:33:ac:19:c1:0d:9a:64:
2f:b2:c6:00:f7:98:b0:75:22:d7:74:6b:fe:ed:7f:52:9e:0d:
64:94:c6:3f:21:9c:0f:37:f3:ef:63:36:2b:a2:4c:76:32:64:
d4:73:d0:60:15:9d:c3:3b:fd:52:17:04:d3:c6:c4:6e:e2:c5:
95:c4:e8:32:9f:16:94:38:0e:55:f1:47:23:64:df:59:e5:03:
a0:3a:11:63:9c:01:88:f8:ef:7d:c5:33:99:55:eb:fa:ad:d7:
51:fa:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:34 2025 by rpki-client