Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa
File: C820C000061E11EFA13A0F4AC4F9AE02.roa (raw, json)
Hash identifier: QOJkyqEtetS9wsy0C4n/u1d49IgeUJ+3owGyeya3F4o=
Subject key identifier: 76:41:4E:3F:D9:D4:82:F0:7B:87:1C:82:A7:FC:82:30:D7:A9:53:12
Certificate issuer: /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Certificate serial: 83
Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa
Signing time: Fri 03 Jan 2025 14:24:11 +0000
ROA not before: Fri 03 Jan 2025 14:24:11 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132386
IP address blocks: 103.162.41.0/24 maxlen: 24
2001:df4:d1c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB
Validity
Not Before: Jan 3 14:24:11 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6777f30b-28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:e9:67:77:1b:74:6b:c1:6b:d9:96:0e:32:
45:12:98:43:b0:ec:2e:1f:e2:93:2c:6c:2e:8b:33:
3e:ae:26:1c:bb:9f:df:f5:a3:dc:22:a1:1f:37:91:
5f:bb:9e:f5:c3:05:34:72:2c:63:13:19:2c:c6:e1:
9e:8c:e4:6f:da:d8:f3:44:70:19:b0:a0:ea:e7:41:
70:b1:77:00:db:c1:00:04:bd:59:cc:5b:31:b8:2d:
bf:40:13:40:77:5d:01:9b:37:1a:13:79:02:56:fe:
7b:c2:fb:88:f7:28:e1:29:42:18:04:fb:ad:71:09:
2c:dc:c5:3e:85:51:8c:75:56:cc:d0:ed:23:52:e6:
01:41:9d:09:7b:61:02:7c:3b:c2:c1:e4:74:2a:7c:
99:fe:12:90:7e:98:e3:5d:25:53:c9:7b:44:c9:c3:
d5:c5:c9:c7:be:bb:c4:e0:d0:23:81:81:4a:d6:76:
7e:e4:87:90:96:6a:d0:28:87:50:82:00:c7:70:b2:
c1:7d:b9:53:2c:e1:80:82:31:e5:98:d7:60:f7:84:
ba:11:ee:21:28:ac:ce:32:cd:28:c5:2e:c6:45:ae:
aa:cb:36:f9:3c:e4:3f:36:61:d1:21:b6:0a:00:ff:
56:cb:75:5d:33:8e:1b:a1:84:5b:85:38:97:e8:63:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:4E:3F:D9:D4:82:F0:7B:87:1C:82:A7:FC:82:30:D7:A9:53:12
X509v3 Authority Key Identifier:
keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/C820C000061E11EFA13A0F4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.41.0/24
IPv6:
2001:df4:d1c0::/48
Signature Algorithm: sha256WithRSAEncryption
52:c1:ce:ce:10:42:e2:9c:67:16:c5:19:35:ff:95:a2:52:a0:
38:74:45:bd:c2:41:12:aa:01:58:78:a1:b2:3c:4f:bb:27:ed:
f5:10:2b:42:95:b3:d0:de:21:0e:cd:a4:b4:c1:2f:0f:3e:62:
7c:b2:f4:13:59:1f:b1:7b:36:ff:40:e7:9e:7c:7a:d9:bf:3a:
86:90:5d:30:a4:7d:2a:53:1e:e9:2e:ef:01:85:8e:82:db:52:
b3:90:66:dc:57:67:b5:cc:9c:0e:03:07:00:ce:18:7d:3d:1d:
9d:8f:10:8c:31:23:cb:07:e0:58:17:c8:be:16:b9:e7:50:a5:
0d:f3:05:1f:e3:97:fd:36:e0:24:fc:c9:26:39:8a:f5:71:39:
87:b0:c3:1b:2d:99:a5:fb:59:59:e4:ac:37:e2:55:8d:49:7d:
f7:d6:ca:fa:65:d9:c2:bb:4a:9f:b2:e9:48:c0:7a:77:86:9b:
62:3e:c9:fc:32:62:d8:f2:42:e1:0f:07:2c:e3:6d:a2:f0:14:
a6:e2:3c:ac:15:35:26:1d:ef:28:d8:51:81:14:c2:5c:3c:da:
a9:88:09:9d:d5:70:29:6f:01:3f:d2:2a:df:fa:02:00:41:c3:
a7:87:47:5f:72:75:8d:12:ab:d8:b7:0d:f7:67:74:81:a3:b6:
0d:31:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:56 2025 by rpki-client