Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
File: 6F46908C2D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier: 4gZpKbAZ3PPZ8XY+4tRmnbJCoHSToqpiZD3Xw35DspI=
Subject key identifier: A9:28:DF:76:C6:9E:39:A7:7F:BE:99:1C:61:E4:EA:60:3E:B6:FD:A9
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 0183
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
Signing time: Wed 03 Jul 2024 04:05:22 +0000
ROA not before: Wed 03 Jul 2024 04:05:22 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.10.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: Jul 3 04:05:22 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6684ce01-b894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:54:56:22:99:7e:8a:11:33:c0:26:12:60:
71:4a:83:74:ba:77:aa:82:c5:2a:08:9c:cb:1e:fd:
60:f1:ba:9e:90:29:9a:3f:e5:c2:57:21:aa:b4:4f:
0a:a0:4f:67:3e:b5:4e:24:64:32:f6:1f:1a:07:d6:
57:17:dd:b5:a7:4c:cb:69:60:54:3f:04:0d:c8:b1:
5a:b6:00:5e:8a:02:b2:82:b2:e0:88:93:64:49:df:
bd:59:66:72:8a:bb:3a:43:45:c1:94:db:c8:64:bb:
ff:a9:99:69:9e:53:9c:07:a9:22:49:05:b3:51:90:
43:cb:20:7b:f0:48:0d:e2:9a:ba:38:dd:ab:23:8f:
62:22:13:c7:0c:58:7c:89:ca:5b:f7:30:d8:ca:8a:
cf:0a:1b:d8:59:86:2c:fd:2a:1e:07:b2:4d:94:b5:
27:6f:86:88:66:09:15:3b:ea:fa:79:7a:8b:c2:f7:
87:0c:9a:d1:42:d2:72:b6:0b:c4:06:78:8a:5f:dc:
35:6d:5f:aa:96:72:70:06:95:00:d3:fe:b6:4b:a7:
4c:cf:5f:14:31:2c:50:2e:91:1a:5e:83:f6:73:d4:
2f:94:5b:99:a3:71:cc:ed:18:d5:53:23:93:e8:dd:
40:1e:28:91:29:4d:42:89:4f:ae:4e:1e:ff:da:5d:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:DF:76:C6:9E:39:A7:7F:BE:99:1C:61:E4:EA:60:3E:B6:FD:A9
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fb:bb:61:27:4a:03:61:c3:71:c0:32:99:7f:bd:62:1c:5a:
75:ac:d8:5f:57:4a:01:6b:84:3f:9e:e5:b7:ff:dd:43:a7:9b:
e5:88:30:f3:93:f0:1d:8a:63:15:58:5d:15:30:b0:6c:6e:62:
e3:55:b9:7b:c0:4d:09:b6:00:49:15:e4:14:6e:d6:0d:e0:7c:
5f:a3:58:94:a6:04:b9:3e:8a:d6:55:41:2a:49:f7:f5:e0:e6:
e9:37:78:af:76:65:24:e0:bd:c6:76:1b:88:60:e4:d2:23:91:
39:1b:1f:b5:c5:50:b3:23:28:2e:07:85:30:7d:67:b6:98:c6:
c8:8d:11:d0:86:8d:be:4c:9c:01:b2:c4:1c:7d:54:e3:57:a3:
db:a7:63:3a:bb:9e:23:16:18:ea:51:44:6a:60:b6:88:c8:2e:
0d:64:22:d0:38:7b:64:73:28:36:38:f1:a2:58:b7:22:ad:42:
cf:3c:6f:88:8b:d8:63:55:3d:a7:ac:9d:e4:57:9e:75:e6:c7:
59:07:2f:63:77:92:8d:f6:4e:c2:39:b1:4c:93:ea:bb:93:2e:
f5:85:08:17:c9:c0:90:b9:68:07:ee:e6:42:a7:3c:45:77:b9:
94:a2:38:42:60:8e:ed:fa:ae:37:4b:9f:be:7c:f7:6d:11:e5:
db:ac:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:34 2025 by rpki-client