Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
File: CFD605CC8E6011EC93F6710FC4F9AE02.roa (raw, json)
Hash identifier: C3Z8uyv87Fr4LSIUMfrdpfjs+vlcYD0NZXPlFdAyO8U=
Subject key identifier: 2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F
Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial: 0547
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
Signing time: Fri 23 Feb 2024 00:43:10 +0000
ROA not before: Fri 23 Feb 2024 00:43:10 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58715
IP address blocks: 103.106.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Validity
Not Before: Feb 23 00:43:10 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65d7ea1e-874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:8f:0e:49:3a:18:6c:2f:4a:c4:31:cf:29:
7b:c7:a7:93:72:c6:c2:cf:51:12:92:d2:36:fd:3c:
63:cc:db:d1:27:62:4c:75:13:2f:1f:ef:4b:49:30:
9a:9a:1b:4d:0e:dc:8f:03:3d:c8:c3:91:ce:40:2e:
4e:6f:dc:cc:f8:6c:c3:15:66:2b:17:23:80:5c:65:
8c:94:12:2f:df:eb:90:2e:04:94:27:ce:8c:cd:b6:
b8:e6:76:74:bd:81:ee:9a:c5:81:5e:f9:c0:5c:a9:
97:02:a1:c7:45:fd:96:52:06:ea:a7:14:6e:4d:93:
dc:ea:ba:6d:c9:b9:f4:97:f4:b5:b4:f0:94:e4:fb:
0d:99:88:bb:7d:dc:dc:47:38:f5:81:c8:30:c6:e0:
02:c3:4d:5b:8d:95:37:8e:e7:a4:66:57:aa:2d:85:
c4:96:90:07:70:c4:fc:aa:ae:9f:ba:e6:e4:5e:1d:
31:96:be:3c:d8:93:e6:15:21:9d:78:96:09:b3:c4:
83:7c:61:fd:2b:83:b6:32:d5:db:21:db:e7:b6:63:
01:d6:c4:30:9d:fd:07:02:a7:1f:af:66:a9:f9:ca:
02:b3:fc:4e:98:a1:23:bb:96:e4:63:7f:c1:2c:97:
39:45:ea:6e:af:d4:33:6d:e6:95:6b:ad:c3:a0:19:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:8D:C7:60:5A:A2:B7:ED:A5:2C:C3:C1:5D:E5:BB:E0:51:0F:4F
X509v3 Authority Key Identifier:
keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/CFD605CC8E6011EC93F6710FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.118.0/23
Signature Algorithm: sha256WithRSAEncryption
05:35:83:de:b1:cb:87:7d:19:f6:b6:3c:b0:3b:9d:72:99:4c:
19:ae:a0:be:f4:eb:d0:61:38:a7:c8:43:46:c0:83:04:da:75:
fc:42:52:8d:59:7c:78:67:45:bf:f2:ee:6c:ed:d1:5a:08:52:
bc:7f:cd:6f:d6:22:18:14:00:b3:48:3f:dd:5c:ef:71:18:8b:
e7:42:f7:ca:5b:9b:8e:3e:1e:db:5b:e8:70:ef:1f:d9:73:5f:
9c:2d:af:af:93:00:55:90:ee:26:f4:03:5f:df:66:84:9d:4b:
7d:72:9b:25:86:f4:05:3b:71:73:f2:16:c8:d3:85:0e:e0:50:
41:59:ea:7e:23:d2:67:a2:c9:6b:96:19:7c:1c:4f:16:2d:3d:
a3:32:30:65:6e:55:97:cb:12:2a:47:97:f1:2e:75:b3:d7:8f:
32:1c:2b:a1:19:00:35:4a:c1:62:59:24:c7:c2:b1:28:f5:e0:
9a:69:84:16:9c:f7:e2:b2:5f:e8:eb:6e:be:01:fb:2b:da:fe:
12:cc:86:dd:f1:c4:c6:4e:d2:d2:97:c9:97:b3:b6:cb:c0:aa:
b4:d2:1f:9e:fe:da:f2:b9:a4:63:7b:a3:1a:58:51:66:cb:f8:
b7:49:b8:33:f5:a5:44:c3:00:98:61:2d:7f:24:8e:3d:df:26:
43:8c:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:26 2025 by rpki-client