Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
File: 91997E58D75A11EDA33F380DC4F9AE02.roa (raw, json)
Hash identifier: bOyGgunCVmvxIFRF76NzMovf0R3AjGkn0ZTDMNq7TVo=
Subject key identifier: B2:A9:E2:B8:F7:05:1B:6F:87:00:27:91:58:C4:88:F2:00:31:BE:A0
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 38
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
Signing time: Tue 23 May 2023 08:20:07 +0000
ROA not before: Tue 23 May 2023 08:20:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 103.54.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A, serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: May 23 08:20:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646c7737-4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:db:c5:df:bb:b8:07:6e:5e:ea:9b:10:16:
13:c3:7b:87:be:7a:ab:7c:29:28:6a:e5:df:b2:9a:
55:a9:64:e5:0e:6e:4a:62:f7:80:b0:a9:98:43:85:
c4:e5:68:33:92:99:69:20:c2:b3:f5:3b:f9:17:12:
d1:6e:f2:55:b6:a3:64:77:09:84:42:97:6e:b9:db:
8c:8d:40:f7:87:bd:e3:fd:22:7e:6b:b8:2a:3a:b7:
c9:5a:61:3e:e1:87:08:a5:44:3f:96:74:50:36:c4:
56:62:e6:2f:d7:a7:3d:11:0e:99:f5:d3:58:8b:ef:
dc:80:ee:bc:34:eb:be:07:55:3d:1e:db:c1:1b:d3:
36:b8:57:c3:2f:b4:2c:05:79:9e:8e:c6:cd:63:2d:
6c:09:2a:37:9f:f8:2e:da:a8:d0:dc:8a:7c:95:c7:
1d:6c:3c:59:91:65:8f:89:df:fd:54:2d:83:ce:9b:
dc:6e:f9:ad:5e:88:13:7b:71:ad:43:4a:ee:5d:8e:
f3:e3:17:08:ff:5d:7d:19:24:22:ee:72:28:f8:02:
f2:17:78:5e:fc:54:f1:dc:13:fb:fb:dd:7a:5e:68:
ef:be:ee:b7:95:fd:12:77:a6:4c:86:af:4f:a8:08:
f4:9c:f9:fe:b0:d0:94:14:b0:98:10:5b:d1:f5:4e:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:E2:B8:F7:05:1B:6F:87:00:27:91:58:C4:88:F2:00:31:BE:A0
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e8:e7:91:e2:e9:8e:8a:1e:f7:a3:2a:67:c5:7b:68:45:89:
b9:3c:3f:b9:18:a1:f9:5f:87:55:25:a2:30:81:28:d8:58:cf:
62:8b:d2:10:0a:65:31:82:ae:b2:16:7a:f1:66:cb:14:28:f9:
e1:2f:3b:8e:e8:64:48:bf:8f:41:56:b6:12:97:ad:36:5a:fd:
96:11:12:05:3e:45:d2:63:4b:24:1a:28:72:e5:05:85:a6:eb:
d5:9f:20:1a:29:83:fe:85:25:ef:fb:2d:db:4b:55:07:7c:7c:
d5:a2:83:11:97:f3:7c:59:91:fa:02:e7:e7:b7:53:b7:43:ce:
c6:01:48:49:93:d8:03:6c:62:13:46:86:c9:ea:53:23:d4:ef:
23:84:fc:05:06:be:ab:32:a7:18:43:0f:af:f1:38:85:49:b9:
98:bb:d5:24:26:38:1e:b3:25:44:05:c4:2b:77:10:ff:c4:df:
17:93:28:07:97:29:f9:40:9e:61:51:1a:c3:39:8a:50:af:47:
63:f0:51:7e:36:21:c4:e6:92:50:63:cd:ef:11:a9:c3:e0:09:
42:47:76:08:03:d6:40:34:9f:97:b7:d7:49:33:97:18:4e:29:
fa:7a:d7:6c:a7:e8:25:6c:1c:e0:59:63:7b:4e:7e:13:81:a2:
94:e7:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:42:04 2025 by rpki-client