Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
File: 74D2ABEE39F811EAA4343534C4F9AE02.roa (raw, json)
Hash identifier: iihbxxzXFJmHmXitRWziyO9onMcMt6rFaPwqQf4Yb9Y=
Subject key identifier: 32:F1:CE:83:8A:B7:A2:2D:F4:EE:3C:BA:92:D2:E0:80:BE:C4:AD:C5
Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial: 0A54
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
Signing time: Thu 14 Mar 2024 20:08:59 +0000
ROA not before: Thu 14 Mar 2024 20:08:59 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140040
IP address blocks: 103.147.190.0/23 maxlen: 23
103.147.190.0/24 maxlen: 24
103.147.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644 (0xa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Validity
Not Before: Mar 14 20:08:59 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65f3595b-1d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:a3:c6:62:29:6b:b4:b4:e1:49:7c:c2:c7:
93:c5:3e:2f:4e:2d:73:7d:d9:78:0c:ac:03:c9:2b:
a6:db:50:39:ee:2f:ec:f3:55:9f:f8:1c:87:ca:de:
83:2e:ee:39:4f:68:07:3d:f1:82:3c:a1:15:f1:d0:
49:85:dc:fc:50:46:0e:44:7e:73:24:b7:4b:44:67:
ea:d5:05:d9:b6:bf:68:92:b1:58:90:d3:60:ec:f9:
d1:b8:46:4e:d0:e7:96:58:2c:a8:b6:57:a5:d3:6f:
a3:77:9d:2d:8d:ce:ef:0a:b7:57:d1:fd:dd:07:18:
2b:5b:c5:d5:1a:5d:84:03:40:36:bd:41:d5:37:90:
68:26:a6:3f:a2:4c:58:5e:c3:19:a1:b5:70:61:19:
f8:7b:02:a4:38:28:f6:df:8c:99:3b:68:d4:66:17:
ee:30:82:f5:d1:02:4e:8f:f5:9b:38:90:cb:b4:8b:
bb:0d:3e:ef:c9:8b:1f:bc:62:1d:f4:90:ce:bd:00:
40:3f:12:aa:f8:f4:ba:b2:04:e1:98:0b:23:a8:2f:
17:d3:bd:24:ad:ea:1f:1d:5b:53:2c:38:d8:af:e3:
0a:25:f6:0c:c5:31:de:c0:d7:7b:9d:48:18:ca:9f:
04:ed:32:71:a4:d2:62:2c:06:f2:29:e8:e8:21:fa:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:CE:83:8A:B7:A2:2D:F4:EE:3C:BA:92:D2:E0:80:BE:C4:AD:C5
X509v3 Authority Key Identifier:
keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ac:30:48:fe:d9:5b:d3:ad:cc:d0:69:fc:16:8f:11:d8:37:
3f:4b:e9:1b:ff:07:7a:12:59:99:c4:5a:57:ca:cc:e7:9c:3c:
ba:dc:8b:92:75:67:38:7d:74:4d:ce:b4:70:5c:d1:24:bd:c1:
e4:ad:e9:03:42:ab:85:0d:76:a1:ca:72:05:ef:45:1f:38:c4:
fe:db:c9:61:56:8d:a6:f8:58:20:14:21:f4:af:8f:fd:aa:64:
91:bf:8d:a4:b4:3c:fd:38:81:f8:4e:e7:22:2f:e6:f1:58:50:
57:a8:3b:86:43:91:3d:3f:5a:76:2d:68:e2:07:3d:bc:4c:6e:
85:7c:8c:80:46:2f:fb:c2:f8:fb:58:11:a5:82:11:ad:f7:e4:
d1:72:01:89:d4:d5:bc:63:96:ee:05:25:f6:60:ff:e6:51:49:
64:15:92:f1:be:94:14:5e:57:77:98:10:02:a1:67:b1:6e:e7:
41:fb:92:2a:92:6f:bd:de:20:e7:53:ea:89:c5:98:34:03:47:
b3:69:1e:3b:18:9a:9a:4b:10:36:f2:70:d6:2f:6a:15:5a:47:
b1:3e:f9:cc:7e:27:f8:af:1a:be:6d:33:1f:cb:3f:96:8e:7d:
f7:b4:34:79:c9:a6:5a:69:1d:b9:5d:67:b6:e7:f7:57:36:bf:
99:04:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:03 2025 by rpki-client