Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
File: 422287F0D30511EE8753D541C4F9AE02.roa (raw, json)
Hash identifier: 4KkZhlwS8BwldE+nm9AJgbyzDDEgaxmp/JCW8JNKT3c=
Subject key identifier: 31:44:93:4B:BA:BF:04:83:D2:88:1F:AA:25:08:58:08:97:72:44:2C
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 02AE
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
Signing time: Mon 03 Jun 2024 04:31:34 +0000
ROA not before: Mon 03 Jun 2024 04:31:34 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150748
IP address blocks: 103.186.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 3 04:31:34 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d4726-b347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:f8:49:fd:36:cf:7b:81:49:96:d7:f1:59:
3c:c4:8f:9a:3c:69:d4:28:f6:68:06:77:55:a3:3b:
70:4d:ea:ff:c3:ac:d8:95:db:1a:7f:86:eb:39:43:
b3:6f:74:39:b8:e6:e5:d6:74:43:32:6b:18:7a:60:
a3:7e:a6:d3:dc:f3:3f:1a:fd:a1:b6:a9:b2:ad:c9:
65:14:cf:25:90:3f:fe:9c:2a:ba:e9:68:52:fc:2b:
f0:3b:98:4d:a5:05:26:5a:4d:96:35:89:2e:07:e4:
bc:c4:67:31:85:d1:23:95:6c:c7:2f:ed:37:75:90:
8f:6a:ea:7b:7e:ef:e2:fd:96:1c:d4:10:58:bf:fa:
2c:33:c8:bf:b6:c2:77:d5:1d:54:45:f2:15:46:4b:
8a:fb:5d:d8:ff:1c:5a:83:7b:28:a8:ad:26:45:13:
83:3d:c0:c5:21:cf:ba:4f:a4:15:8c:73:e3:74:e1:
c4:de:ff:b5:f2:bf:02:cc:48:77:59:3d:1f:19:b5:
d3:2c:f2:f7:db:8d:08:f9:e2:82:40:7a:07:9d:aa:
14:97:13:e4:d2:9b:a3:ea:8f:8a:c7:33:97:cc:de:
34:c8:f2:d7:0d:39:c8:70:f2:12:04:5a:a3:2e:f7:
9a:a7:5c:2b:1c:3c:c9:82:45:f8:e4:45:3e:ae:82:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:44:93:4B:BA:BF:04:83:D2:88:1F:AA:25:08:58:08:97:72:44:2C
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f8:84:af:a1:4a:a2:56:10:66:4e:2c:67:4d:98:43:80:58:
19:f5:66:08:32:dd:07:b9:72:ca:be:e1:c9:ef:bf:54:34:a2:
5b:a3:f7:fa:3e:70:5d:d6:83:e5:d7:a6:19:14:fe:b1:58:be:
35:96:f4:b6:a1:dd:7b:48:4e:cc:c4:f5:a8:0f:1f:f8:29:46:
55:ac:79:47:97:3f:ef:f0:81:a0:f7:01:01:7e:b1:98:81:16:
08:5b:64:2f:53:35:cf:7e:79:54:64:5b:33:d7:fb:0b:5f:57:
8c:5f:12:4c:74:47:39:d8:7d:2d:ad:61:5f:fa:d4:5e:ef:e6:
1c:cd:aa:6f:93:bd:84:91:3c:2d:be:6a:49:b0:5c:68:e2:32:
95:58:5d:8f:8c:40:70:7e:ca:cb:f8:4a:d5:ed:68:59:e6:f4:
47:22:70:0b:cb:e6:b7:4c:e4:bd:21:a5:47:92:07:30:83:8b:
1a:b4:50:3e:45:17:06:61:9d:7f:a9:e6:5d:fa:10:8c:4a:bb:
53:dc:df:07:c6:46:f3:f0:78:73:52:01:ca:95:fd:7c:69:ec:
ca:ef:6c:f1:2c:10:eb:e3:98:10:7b:b9:15:f9:01:8c:4e:17:
57:74:a8:62:67:97:5f:fa:40:da:76:a5:6e:83:58:49:39:44:
8c:f9:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:12:52 2025 by rpki-client