Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa
File: 888790B6CD3A11EF87D85012C4F9AE02.roa (raw, json)
Hash identifier: kZnv8kSunTfFOlBeqALlz8a1BnpXDDxBSOYVAq5aBA8=
Subject key identifier: B9:0F:65:DE:57:C6:9D:32:5B:65:70:3C:51:EF:F1:DA:79:DD:C4:8D
Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial: 034C
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa
Signing time: Tue 07 Jan 2025 21:01:16 +0000
ROA not before: Tue 07 Jan 2025 21:01:16 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4760
IP address blocks: 103.182.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Validity
Not Before: Jan 7 21:01:16 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=677d961b-f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:41:ff:e1:1f:42:72:1a:5a:00:41:1b:71:
7d:13:f0:d0:4b:db:67:4e:a1:f4:56:0b:64:40:64:
0e:d8:bc:55:1f:ee:e5:51:c1:13:be:91:31:ee:82:
f2:d5:b2:13:8c:af:60:8e:c5:07:97:c4:9e:d7:e8:
b0:3a:58:2d:0b:2d:89:2b:64:db:46:b9:e9:7f:70:
6d:ce:b5:64:15:36:e6:e4:09:7a:1a:69:21:51:72:
31:9a:92:fb:7b:3f:af:79:d0:ae:18:de:99:44:e5:
2c:17:03:35:a0:80:c8:3d:62:44:b7:f8:43:ab:32:
67:79:75:74:c3:4b:6b:c4:87:d8:75:50:51:88:c4:
e0:f2:88:7f:3e:1c:16:13:21:60:94:e9:a4:4a:5d:
fd:36:8f:c1:61:f4:35:35:d2:56:ef:bb:bb:db:a9:
0b:c6:39:19:71:e1:05:82:21:38:13:ae:b8:4c:f7:
6e:cf:76:1a:aa:a0:00:02:72:1a:81:f2:31:b2:ef:
f8:23:ed:bb:7c:ac:63:4f:78:db:16:6b:e3:13:8a:
d4:ce:ce:51:9d:4d:89:85:38:d3:81:76:1a:71:3e:
3f:ca:85:c3:52:22:e1:b9:65:dd:6e:51:42:e9:ea:
4b:a7:33:c5:87:ef:89:ba:8b:02:cb:e3:6b:7f:61:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:65:DE:57:C6:9D:32:5B:65:70:3C:51:EF:F1:DA:79:DD:C4:8D
X509v3 Authority Key Identifier:
keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/888790B6CD3A11EF87D85012C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3a:ae:95:23:08:ab:a2:ed:c0:e1:79:f2:73:24:46:cf:a2:
2b:ac:6b:17:34:69:ec:aa:0d:8b:f2:4c:11:1e:87:b9:fb:08:
ca:e7:3d:2f:fc:9e:94:ab:11:d5:e3:6a:b5:5c:56:d6:1a:10:
a3:77:05:e3:47:48:8b:00:83:32:b6:88:41:2e:f5:8b:07:c3:
4a:88:b8:57:9d:4e:18:0f:a1:62:47:cd:ab:40:da:81:9e:5c:
5e:28:41:2c:27:87:56:e2:47:23:33:9b:10:f7:f1:2f:29:2d:
df:8b:52:f4:30:60:d2:34:1a:f1:73:9b:d1:99:fb:40:0e:3b:
71:c0:bd:d9:d7:e1:96:9b:d6:a0:60:fb:21:79:18:c8:78:2b:
e8:81:ee:c3:d3:b6:99:9d:c2:a6:03:08:c6:bb:9d:42:8f:75:
11:ff:22:76:b2:9c:93:74:b8:1d:f7:e3:b4:c4:4b:4b:fa:30:
64:5d:a7:e0:d7:26:b6:36:ab:ae:ca:de:12:e6:da:f9:07:9f:
7c:56:14:4b:dc:04:07:66:d8:2b:c8:83:93:12:c9:84:ef:0c:
28:59:20:3d:57:7d:a9:45:58:ef:39:01:c8:7b:d2:d3:4b:63:
62:4e:50:6c:a0:8a:56:b9:1e:7c:6f:60:48:1f:ec:32:7a:e9:
eb:b4:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:57 2025 by rpki-client