Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa
File: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (raw, json)
Hash identifier: ua1AQMU7bCCk0fcUdLe1mRz8NyiPnpe550PawenVzJc=
Subject key identifier: BB:44:2F:D4:5F:3F:41:4E:6A:7F:46:B7:DA:F5:8F:90:75:CC:F0:B2
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 011C
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa
Signing time: Wed 27 Mar 2024 05:38:04 +0000
ROA not before: Wed 27 Mar 2024 05:38:04 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 212238
IP address blocks: 103.86.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Mar 27 05:38:04 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6603b0bc-c9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:bc:ae:e5:06:6a:f2:2a:0e:7c:67:72:bf:
71:e3:a7:b7:c3:52:76:97:95:d4:0c:50:08:f0:06:
c0:22:24:1b:8f:04:e3:b8:a5:e3:a6:9b:c9:57:58:
1f:e4:e6:ce:ec:5c:93:c9:97:4d:e3:e3:11:16:9b:
93:32:42:fc:68:15:be:8e:d6:e6:0d:dc:42:d4:48:
f4:20:1b:df:1b:47:02:0a:25:be:a9:98:82:47:90:
11:f3:62:a0:c5:74:74:8a:b7:36:c0:02:48:22:72:
6d:1b:dc:61:a6:4d:7b:8a:2a:2b:35:a7:5c:19:8e:
c4:19:77:63:32:98:2a:b9:d9:fa:17:d4:93:6f:d0:
74:f9:2e:ee:42:e5:b2:d1:d6:4f:49:2f:23:ee:55:
2d:d9:15:5d:32:1b:cf:2f:c4:08:cd:3c:55:f3:dc:
1b:7c:55:00:ef:ae:b2:2c:9f:fa:9f:ab:7c:f9:3f:
6f:b9:c2:75:1f:45:90:51:d0:81:25:2e:e6:97:04:
59:87:65:6b:7d:40:d2:7c:78:17:9a:c5:98:3f:13:
a0:dd:46:5b:c6:aa:27:9a:85:19:b7:0d:f1:05:6e:
2f:12:51:92:77:54:78:8f:0e:92:7b:37:1a:7e:dc:
af:69:a3:19:c8:35:bd:21:6b:86:31:d4:39:89:c2:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:2F:D4:5F:3F:41:4E:6A:7F:46:B7:DA:F5:8F:90:75:CC:F0:B2
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/E4DFE77CD77E11ED8E33F181C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.123.0/24
Signature Algorithm: sha256WithRSAEncryption
98:04:e1:23:03:b4:31:01:49:08:94:54:ae:ae:bf:66:0d:48:
18:25:aa:cb:9e:3f:ba:7c:fa:c4:ad:74:48:19:dd:8e:bc:e3:
b7:4c:58:e5:ae:0b:ed:c6:ca:21:72:7c:6e:dc:b6:ad:f9:0e:
a4:c6:fc:cd:15:b1:8c:22:f7:ea:65:c8:a8:60:86:eb:0e:b7:
14:7e:3b:96:56:13:d4:6f:ce:91:a9:07:48:9d:a8:ad:66:d2:
97:fb:90:89:f4:73:ff:9f:fc:72:42:19:5f:7b:3d:38:e8:96:
36:4d:14:04:ae:1d:b1:b0:73:44:94:3c:e2:ba:a5:bb:7d:c1:
a0:0a:6e:9f:50:9f:19:19:34:47:78:a1:c5:0b:2d:6d:cd:59:
29:32:be:43:e3:db:12:15:08:96:82:06:a4:36:ba:22:fa:f5:
e9:80:7d:6a:ec:37:ce:07:76:47:01:c0:48:71:e1:26:8b:9f:
53:6d:de:1e:52:29:b4:99:45:95:ff:2d:40:65:c5:fd:b0:5a:
77:0e:34:1e:1a:3b:f6:61:60:4f:7d:62:4a:16:18:d2:02:17:
52:dc:6f:3a:36:84:2f:8d:e5:61:eb:df:6e:20:5b:cd:9e:b3:
bc:26:6d:ec:1c:67:28:96:1c:be:0e:00:75:f4:7a:0d:3e:d9:
b5:e1:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:03 2025 by rpki-client