Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
File: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (raw, json)
Hash identifier: yTN9MP3cWtCOgKN18rXJLFQgow1VV1s7v1uBxUJ0Wk8=
Subject key identifier: 08:7A:7E:C4:80:94:9A:DB:18:8E:0A:AE:5D:C0:F7:DB:ED:4B:A5:52
Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Certificate serial: 06CD
Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
Signing time: Sat 30 Nov 2024 22:11:37 +0000
ROA not before: Sat 30 Nov 2024 22:11:37 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 141457
IP address blocks: 103.159.236.0/23 maxlen: 23
2406:ddc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Validity
Not Before: Nov 30 22:11:37 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674b8d99-639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:97:42:64:87:f3:fd:0f:0d:cd:6c:b3:21:
04:51:05:63:ce:98:ee:38:6b:45:37:3a:d2:2b:42:
5a:02:77:f7:37:11:bd:2c:a2:88:8c:c3:79:c0:77:
cc:44:9a:a4:99:a2:89:9d:0a:ad:4c:70:e7:3d:dd:
83:ed:6d:26:e5:4d:d4:d0:02:f5:2f:5e:73:e7:52:
5a:08:2e:25:35:56:c4:f6:ed:1b:8b:2d:d9:30:b5:
0e:b3:a9:fd:99:94:c5:5f:e5:78:18:f9:b0:46:32:
68:9d:82:29:1a:e2:69:54:49:fc:4d:51:57:c7:39:
f6:9e:7b:9c:38:76:9c:ea:c7:46:46:0a:ed:c2:60:
e1:df:53:d7:6e:29:59:aa:b2:80:83:08:2a:48:a8:
66:09:64:a1:4c:a0:cc:76:bf:d0:2a:17:b8:c1:ca:
3f:87:6f:73:5f:03:92:e2:44:5b:99:8a:c1:1b:15:
c7:f3:55:84:83:e2:83:d9:fa:9d:16:66:d8:70:ed:
0e:c6:65:44:a9:90:aa:a3:05:ca:94:b2:4b:87:8f:
7b:d7:77:db:25:f4:47:94:e5:f3:4b:2b:f7:3f:f8:
97:6b:74:04:15:a3:44:cb:89:44:2a:48:ac:07:7a:
8f:81:69:66:c1:b1:ca:fc:41:c3:31:c1:74:09:a0:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:7E:C4:80:94:9A:DB:18:8E:0A:AE:5D:C0:F7:DB:ED:4B:A5:52
X509v3 Authority Key Identifier:
keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.236.0/23
IPv6:
2406:ddc0::/32
Signature Algorithm: sha256WithRSAEncryption
33:d2:25:1c:92:62:14:2d:8f:07:e7:d4:dc:c3:bd:51:0f:1b:
e9:c7:98:84:d0:d6:bd:17:0e:bd:0a:b2:24:b0:1f:0b:81:d3:
f6:5c:92:2e:a9:dd:c5:c3:b0:81:96:8e:6c:08:c1:f6:57:00:
60:68:de:b6:05:ff:7b:6a:a1:d9:3b:2d:bb:ed:21:a9:db:47:
16:93:a0:8d:1c:20:f1:93:c6:62:49:8a:cb:d7:4f:2e:17:d8:
76:c8:ff:6f:db:4c:06:fb:88:c5:c3:d1:1f:dd:dd:e6:19:f7:
85:2e:bf:71:c7:23:30:5e:1c:1f:83:aa:d7:6c:e6:67:d3:82:
5f:18:7c:af:31:60:6a:b9:72:4d:a2:3c:aa:49:ec:f4:0c:ff:
59:20:a9:d9:cf:c7:e4:42:e7:a5:57:b0:2a:86:e9:55:1b:33:
fa:25:eb:1c:81:de:87:ff:e1:9e:b2:45:25:7c:06:02:db:74:
2e:21:0b:bc:ac:7f:b8:4d:61:e2:27:b5:35:c9:12:b9:7a:d1:
6c:c5:7d:b9:a1:a3:9a:84:11:26:ca:36:35:32:32:29:ad:35:
59:7b:52:81:0a:6f:47:d5:3b:ea:fe:5e:54:58:c8:d6:87:ea:
d0:01:6c:4a:97:26:a4:e0:a1:29:96:7a:38:8f:ba:1b:f8:01:
ae:39:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:25 2025 by rpki-client