Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
File: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (raw, json)
Hash identifier: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=
Subject key identifier: 01:BD:ED:F9:3C:84:3D:FE:75:67:46:05:19:8E:9F:8D:4B:6D:CC:8C
Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Certificate serial: 0196
Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
Signing time: Tue 03 Dec 2024 02:25:56 +0000
ROA not before: Tue 03 Dec 2024 02:25:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134372
IP address blocks: 103.103.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD
Validity
Not Before: Dec 3 02:25:56 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e6c33-ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:de:1b:88:3d:df:ea:db:45:33:ae:a6:45:
0e:40:0f:79:9f:ae:36:fe:c6:0d:e8:ec:87:da:5e:
03:32:4e:87:16:86:db:c1:ee:0d:b9:50:c4:13:ff:
9f:48:de:98:6a:06:1b:c9:ca:18:f7:d5:2b:04:0b:
12:a0:a4:d8:7a:2d:c6:30:54:14:51:8b:b6:bd:7b:
f3:43:02:72:06:e1:17:2c:8c:02:92:d9:b6:c9:92:
32:09:73:92:b8:0f:94:c1:bb:04:34:e7:7f:85:a4:
fe:99:68:dc:21:3e:9c:9f:62:d2:b4:dc:e3:00:aa:
c5:f8:9f:df:39:43:2e:0f:b4:31:ee:3f:37:83:cd:
4d:f4:20:fd:16:be:75:8d:ec:a4:80:d8:f0:25:6e:
c4:3a:5a:e2:20:50:fb:17:20:68:4c:01:25:b0:49:
19:7a:26:63:6c:18:f5:06:ea:24:db:b3:80:ce:ae:
d3:a0:6a:43:a8:ac:09:ea:64:f0:ed:04:82:ac:35:
ff:e8:2a:93:d9:e3:8b:6f:d4:6c:57:b9:2e:53:db:
b7:c3:be:8f:6c:64:f1:44:26:34:dc:e7:70:ae:97:
fc:53:e1:41:99:ca:a5:59:84:e0:3e:17:7b:f6:51:
5f:60:d1:8c:61:de:d3:bd:53:7d:65:b8:c4:cc:ad:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:ED:F9:3C:84:3D:FE:75:67:46:05:19:8E:9F:8D:4B:6D:CC:8C
X509v3 Authority Key Identifier:
keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/59DD05DA541E11EDB324CE7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.96.0/23
Signature Algorithm: sha256WithRSAEncryption
61:dd:e3:2d:30:d7:ca:47:c8:11:00:22:1f:99:4b:cd:33:77:
9b:f8:86:0b:c3:84:61:b5:3b:d1:bc:f4:47:86:07:fb:5b:10:
0e:d8:9c:74:a2:09:eb:86:91:e8:d2:f4:fd:8a:36:30:f3:b8:
cb:cd:61:99:99:78:e5:31:00:a6:f8:79:4f:03:4a:a4:a6:e3:
66:2f:40:02:0c:79:13:c2:47:cc:f8:1d:88:c1:3a:c7:bb:aa:
4e:f5:ae:d6:4b:55:59:10:f4:9b:82:08:78:72:8f:4d:99:19:
f3:b1:97:ad:f6:24:6b:20:f1:67:f5:26:28:f3:1a:17:3a:bd:
a8:ae:8d:77:e3:41:e4:ca:0b:eb:24:6b:7f:98:7f:5d:72:57:
d0:21:36:50:f1:7a:54:54:dc:4c:b1:1d:9e:e5:7b:11:f0:ac:
da:b8:c9:75:b5:6c:5e:9a:a4:73:c6:35:a3:20:88:39:be:87:
a6:67:3d:4a:f5:8f:ab:67:fd:0c:f3:88:ef:f7:46:1d:6a:d2:
d6:fc:4f:4a:c4:ad:9b:dd:4d:b4:a7:a3:4d:f7:3e:47:92:95:
a8:4e:5c:5a:e9:a9:f4:8e:8e:f5:84:ab:01:a5:cb:eb:00:48:
2d:e3:ff:1a:7d:20:bd:a1:0e:74:00:08:c2:dc:85:92:a6:8d:
a0:0f:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:21:06 2025 by rpki-client