Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json)
Hash identifier: CtRLKn6Ho9BgRI41OP+GfRuStv7HD0JEHEC66mznFgA=
Subject key identifier: 22:66:96:64:AB:BC:CC:B3:E8:8B:CB:DA:A9:10:E3:77:33:76:24:8C
Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial: 0A30
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
Signing time: Mon 20 May 2024 20:59:23 +0000
ROA not before: Mon 20 May 2024 20:59:23 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135311
IP address blocks: 103.213.240.0/23 maxlen: 24
103.213.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608 (0xa30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Validity
Not Before: May 20 20:59:23 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664bb9aa-44b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:de:14:09:6e:ee:46:1b:4d:f4:ac:fe:b3:
10:48:3a:a9:27:44:66:19:2a:ba:fc:5d:f2:a9:67:
88:68:e4:e7:f5:de:51:67:7d:bb:a5:9f:e1:1c:97:
cd:fe:e2:1d:36:ea:a4:42:55:cb:91:56:9c:ea:94:
ff:cb:e8:09:69:44:a7:ee:b7:de:b6:fd:bb:c8:51:
25:30:a6:0f:27:0d:7e:c7:89:04:74:a3:9a:fa:de:
94:9c:b5:c5:7d:6c:ef:63:4c:0d:f3:5b:9c:b6:e4:
6a:d2:6a:54:8e:db:63:30:18:86:e4:d9:ed:37:58:
75:f1:4a:a8:c3:b5:33:3d:57:62:94:7f:0b:45:c6:
7a:43:0b:b7:d1:56:b8:eb:fc:36:4c:aa:48:9b:0b:
2a:e5:76:f7:a5:0f:c6:28:4e:89:6d:d2:38:e7:a0:
f3:b9:ed:0d:bb:40:45:12:7f:6c:bc:c3:a8:5a:9a:
00:03:64:66:af:38:94:58:9c:03:54:41:fe:36:9e:
7a:c4:7c:68:45:ed:50:3e:16:88:cd:1e:7a:bc:13:
da:b3:f7:20:75:4a:d2:02:ee:09:aa:4c:6b:a2:f9:
b5:0a:c1:cd:e5:a1:46:1b:e9:d0:45:12:ef:a7:c8:
f5:47:30:4f:3c:8a:73:d3:7c:73:74:0b:61:34:06:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:96:64:AB:BC:CC:B3:E8:8B:CB:DA:A9:10:E3:77:33:76:24:8C
X509v3 Authority Key Identifier:
keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.240.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0d:b2:5c:25:27:8d:d2:6d:89:fd:d8:b5:4b:4c:50:b1:ec:
37:5e:c6:11:63:74:1c:ec:30:0c:f7:11:ab:59:a8:c0:8b:b8:
af:f7:40:e5:e6:28:fa:34:5e:6b:1f:59:e8:15:72:c4:46:9a:
8c:c3:5d:72:5b:76:a3:81:24:1e:8b:20:45:d5:69:cb:96:7c:
b9:41:67:d3:b9:08:db:18:c2:e8:0d:25:05:4a:52:c2:ee:19:
53:64:9c:f3:ac:0f:24:f1:a1:8b:1d:c5:62:a3:a5:35:2b:a2:
8c:54:7e:96:ee:2c:b8:6b:d5:e9:75:d4:3c:90:73:68:7d:04:
72:49:ac:a3:7f:6f:0c:10:ef:51:78:de:2f:20:6a:93:11:55:
be:7c:8c:fb:85:1c:8a:14:57:c6:c8:b8:eb:4e:aa:4c:ad:de:
8a:48:ca:d8:7f:fb:23:6e:b6:41:f6:a7:a0:b6:3c:0a:ea:dd:
9d:28:fb:50:1c:37:b3:e7:05:25:72:6f:2f:5c:fd:d0:d2:46:
32:16:f0:2b:d2:cb:22:fd:cf:0c:f9:07:51:5d:80:7f:a5:29:
a6:0a:0e:80:6b:28:7e:bc:dd:fb:a9:68:9f:85:fd:19:7c:40:
ca:a8:22:87:b7:30:11:95:8c:a5:76:ba:b4:68:5f:4d:bc:30:
14:20:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:00 2025 by rpki-client