Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File: ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier: cddNE6Chf1nZGt0cOcCcSrNF4VTM1nV8tD0C7wKaK+M=
Subject key identifier: 0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 02B4
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time: Fri 01 Mar 2024 03:35:32 +0000
ROA not before: Fri 01 Mar 2024 03:35:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 142403
IP address blocks: 103.146.158.0/24 maxlen: 24
103.146.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Mar 1 03:35:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65e14d04-b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:03:83:02:63:b0:27:37:0a:cf:f4:94:3f:
79:65:0c:17:aa:81:1d:95:b8:af:05:b7:5a:90:62:
7b:f8:70:3a:cd:ac:ba:b5:fc:58:f4:d3:a3:33:a0:
68:d2:3b:51:3d:53:b7:fc:8e:55:58:ec:e1:bb:0f:
81:97:4c:c5:40:c1:63:0e:21:7c:41:b1:25:08:a9:
ea:0d:8d:d8:ca:89:b6:7f:c0:8c:ec:87:d1:e6:a2:
17:00:63:97:ce:74:75:41:e4:71:8d:2d:7c:f1:41:
b1:b9:d2:86:4d:e2:24:ae:2f:ef:d4:7d:7b:9f:0b:
b6:26:02:44:83:33:ea:8a:ba:98:a2:31:5d:a9:1c:
ff:fe:6e:76:da:a9:c3:dc:90:01:22:90:be:8b:2c:
7b:8a:e6:74:bb:77:3a:db:bb:c0:6c:99:f7:bd:7a:
41:66:af:08:1d:d3:14:4c:d7:22:95:39:56:7e:f2:
9b:a2:a4:16:3d:bd:02:b7:8a:48:3e:65:07:2c:95:
0f:fc:bf:a2:13:1e:5b:78:92:4b:03:69:61:20:19:
e0:85:79:b4:1f:af:4a:81:8f:a9:99:37:f3:2f:0f:
63:4a:18:49:e3:d9:f3:d7:f8:87:ed:34:66:6d:2a:
99:4c:38:95:e3:fc:0e:4b:be:c6:c7:7e:92:af:c4:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B2:E9:7F:4A:38:A6:F0:34:EA:6E:41:FE:EB:6B:8B:FB:6F:4A:2D
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.158.0/23
Signature Algorithm: sha256WithRSAEncryption
92:4d:d3:7b:13:bc:97:9a:7a:b4:5f:37:81:1c:40:ac:33:df:
8f:80:44:a4:df:cf:5b:73:41:5a:a3:a4:b7:31:e3:17:7d:50:
94:a3:cb:8b:23:da:a0:c9:a2:d9:69:91:07:44:c2:c1:ce:c9:
ba:6e:63:bd:f0:ba:53:79:d2:94:bb:eb:c8:22:7c:4f:3a:46:
77:bd:ae:94:d5:ec:e1:89:dd:ee:f6:c2:6b:bd:f7:41:00:8c:
b7:4e:73:be:05:bd:26:18:a0:61:d2:7e:83:3f:cd:51:61:4c:
0c:c9:69:31:93:6a:8c:e5:9f:ff:e9:6a:bb:f5:e6:a5:9a:ca:
fb:e1:61:e4:31:cf:d0:ff:b0:ca:4a:24:4d:84:b2:df:27:a7:
da:0b:ca:cd:7e:c6:f8:d6:90:4a:59:a7:2a:36:ea:f4:f9:11:
ee:21:2e:19:a6:6b:7d:c5:1d:50:e1:74:12:d2:53:9b:74:36:
e7:ef:20:2d:e3:a2:59:93:01:2c:7c:94:a1:d9:e1:a5:40:3c:
a5:4e:95:08:7d:85:ff:f9:82:77:42:df:e5:ec:6c:fc:cb:cb:
2c:6f:03:d4:d3:95:de:77:65:12:b8:95:c4:a1:47:63:b4:69:
26:a2:30:27:c9:dd:c8:a9:03:0e:35:18:52:36:e6:c6:39:59:
0f:e8:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:17:19 2025 by rpki-client