Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa
File: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (raw, json)
Hash identifier: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=
Subject key identifier: A4:4F:1C:F2:BB:68:B3:D4:68:50:BA:9E:20:52:31:8D:E1:12:83:E2
Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Certificate serial: 19F7
Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa
Signing time: Thu 24 Oct 2024 16:55:31 +0000
ROA not before: Thu 24 Oct 2024 16:55:31 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 134544
IP address blocks: 45.126.0.0/24 maxlen: 24
45.126.1.0/24 maxlen: 24
103.35.252.0/24 maxlen: 24
103.35.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6647 (0x19f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Validity
Not Before: Oct 24 16:55:31 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671a7c03-0a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:23:56:15:0c:4d:2a:a3:9a:c8:b5:3e:3a:
79:27:8e:c5:22:26:da:80:7d:be:ef:c6:b1:5a:2d:
56:fd:7f:a9:bc:46:c2:10:bd:b0:55:1b:e4:7c:c5:
34:25:29:5c:13:50:b8:fe:24:30:c3:f5:8c:6d:27:
d6:f8:4d:3f:0c:87:cd:48:f7:6e:16:ff:a7:8c:c9:
4d:bd:4b:04:f0:73:fd:3c:77:61:a8:40:e3:8a:2a:
46:42:2f:50:ec:48:b7:6f:34:ac:7b:85:ee:d3:a2:
7a:ce:c1:6e:e2:fd:5a:dc:6d:d1:51:00:e8:72:a4:
4f:45:45:ec:31:a2:b0:54:9b:ed:72:1d:72:05:41:
bd:25:1f:61:09:4c:3c:cf:82:0e:63:74:28:1b:e4:
9b:1f:02:3e:70:68:e4:ee:29:4f:ab:1e:54:02:f5:
bd:1b:bf:60:f1:2c:f7:a2:40:0f:b1:40:10:b7:3c:
69:51:33:80:4c:dc:a9:04:ef:b9:7a:40:69:a9:e4:
bd:47:53:fb:e6:31:0b:08:f8:e4:1b:6e:b0:12:67:
50:aa:6a:51:53:0b:a6:68:db:68:8a:c7:93:53:a2:
cb:3e:da:df:68:9e:04:2c:b7:23:dc:3b:91:00:7b:
a2:92:92:c4:27:51:a7:8a:15:63:12:e7:9d:d7:f0:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:1C:F2:BB:68:B3:D4:68:50:BA:9E:20:52:31:8D:E1:12:83:E2
X509v3 Authority Key Identifier:
keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/312DC5B8405E11E7A28FCE45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.0.0/23
103.35.252.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:84:7c:4b:c8:bb:74:3b:41:a0:81:21:8f:94:5d:f6:b7:e3:
8a:8b:a3:b9:2c:17:1c:6f:05:40:a8:0d:4f:32:bf:3c:1f:27:
6b:21:4f:7e:39:76:03:a2:4d:14:ec:96:01:de:3e:f7:c4:bf:
0b:20:ec:36:ec:b7:38:9c:ff:1b:6e:b0:d4:73:10:26:09:46:
96:0e:df:d0:5d:9d:db:c7:16:4c:75:8b:5a:91:d7:90:c6:4d:
0f:fd:2f:19:fb:fc:6c:a2:98:13:bc:b2:54:3a:87:e6:de:b3:
7d:6e:33:9c:15:8b:f3:66:08:c6:ee:e5:71:58:81:b4:ee:09:
a3:c3:6a:9c:47:d6:0b:67:8f:63:d6:9c:4b:54:96:60:04:a7:
39:8f:b0:99:98:d6:c1:b0:78:30:d3:c1:cd:02:7e:14:04:f3:
4b:6f:c4:63:f2:8e:41:b4:0f:d1:3b:92:43:16:3d:c9:1a:21:
97:67:88:1f:68:02:d0:db:d3:96:ad:50:71:1a:64:97:2c:8d:
b8:25:0e:6d:ef:49:24:c7:f8:16:b8:b5:f0:38:16:ac:25:29:
b9:23:52:14:84:ef:2a:d7:01:db:62:9f:d7:5f:7d:d7:52:af:
97:23:52:fb:52:5b:a5:32:ee:18:4b:28:b0:b8:10:24:80:5d:
e8:4a:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:51 2025 by rpki-client