Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
File: 1B4BA08497A711EDA815F80AC4F9AE02.roa (raw, json)
Hash identifier: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=
Subject key identifier: DC:F7:0C:AE:A7:70:AD:F1:9A:7A:D2:3D:ED:97:08:31:7A:53:88:37
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 0140
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
Signing time: Thu 19 Sep 2024 00:03:58 +0000
ROA not before: Thu 19 Sep 2024 00:03:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 142643
IP address blocks: 103.171.144.0/23 maxlen: 23
103.171.144.0/24 maxlen: 24
103.171.145.0/24 maxlen: 24
115.178.26.0/23 maxlen: 23
115.178.26.0/24 maxlen: 24
115.178.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: Sep 19 00:03:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eb6a6e-664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:34:35:d6:c3:c2:fd:8c:1f:ce:b2:22:d2:
5a:cd:43:0a:41:56:a1:32:17:5a:78:48:5c:3b:b0:
c4:15:70:b1:a8:d7:e5:b6:e9:9e:2b:e2:61:90:18:
a4:46:7c:27:b2:31:bb:f5:79:a2:67:5a:ae:d4:ec:
db:03:16:c2:10:f4:7b:53:cc:4d:bc:7b:ff:fb:46:
a6:d4:db:fd:19:69:74:20:59:4d:8c:ec:3c:8c:c2:
7c:f1:46:54:31:e4:af:24:ca:bc:c7:f2:b3:c1:b2:
8e:04:ed:de:74:47:ab:9c:7b:cd:de:33:e3:6a:de:
66:2c:25:95:91:9f:a2:f9:08:b5:49:f3:eb:f3:cb:
5e:bd:d2:cc:d5:02:d9:05:c1:28:96:e5:8e:8a:04:
b5:e7:e4:a6:70:12:e4:58:e5:6c:a6:23:ce:11:a4:
4a:43:92:df:7d:73:ba:11:5b:d0:bf:91:c1:b0:1c:
07:29:f1:20:62:a2:9e:db:7a:84:35:47:4e:4a:d8:
37:28:f6:79:9f:5b:8e:3b:57:14:2c:24:28:5c:1f:
c7:95:e4:cf:67:07:80:0f:20:07:7f:40:6f:d4:18:
68:bd:58:e8:4f:52:73:9a:cc:9e:79:08:6d:9d:01:
f3:3c:ae:eb:82:92:05:cd:85:d4:87:a8:42:b7:af:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:0C:AE:A7:70:AD:F1:9A:7A:D2:3D:ED:97:08:31:7A:53:88:37
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1B4BA08497A711EDA815F80AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.144.0/23
115.178.26.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:fb:2f:f8:a9:35:9b:2c:54:c3:9b:ed:6f:1b:8e:c2:d5:da:
fb:bb:6a:c4:1d:13:d0:9e:8d:5b:bd:b7:4b:fa:bd:8b:6f:65:
b2:c0:97:c4:bc:c6:2d:c3:4b:b7:06:b4:b1:3c:0a:9b:96:91:
7e:8a:f6:06:0f:fa:1a:c1:75:1d:d7:45:9a:95:6e:3f:05:de:
da:41:34:b6:98:fd:ce:ec:3c:c2:d6:70:92:35:01:c5:43:f6:
fd:20:91:ba:b3:97:c7:83:d9:24:c3:b4:37:85:d1:14:a6:50:
6e:77:65:cc:34:c6:4c:d1:1c:0d:84:d7:6e:06:1c:de:de:1e:
f2:35:c6:8f:ea:f4:54:55:3f:77:c7:87:27:b4:2f:0c:4e:6e:
be:ac:62:41:5c:f6:57:a0:bc:e7:4f:52:22:bb:ee:2f:65:88:
3b:f4:fd:fe:0a:a7:aa:3e:e0:09:1b:bd:ce:1f:57:90:7e:87:
04:90:1a:f3:4f:29:3f:e3:ae:f5:e8:14:db:84:6a:d8:d5:5d:
2d:c5:b4:4d:2b:2b:a2:c4:cf:5b:80:bc:36:fe:9d:c2:db:7f:
24:07:69:a8:d3:e6:93:d2:42:a6:4d:d8:4b:23:46:1b:6a:01:
80:0c:ed:64:f7:6a:ed:74:fe:52:93:7b:f2:3d:bb:9d:b6:c6:
7c:5b:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:29:22 2025 by rpki-client