Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
File: 460F948CF58C11ECAE269934C4F9AE02.roa (raw, json)
Hash identifier: kddDiY1SaBXbZLYfj0lZgL5nuCOTpHEBUPrzkMRd/3M=
Subject key identifier: 3C:92:D0:FA:1B:C0:FF:57:AC:A2:30:C1:3F:D8:A8:48:B6:58:51:83
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 0229
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
Signing time: Wed 17 Jul 2024 03:25:02 +0000
ROA not before: Wed 17 Jul 2024 03:25:02 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 149986
IP address blocks: 103.190.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Jul 17 03:25:02 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6697398d-6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:d1:9e:f3:0d:6f:d0:14:72:dc:51:7e:eb:
a1:e2:21:5e:bb:c7:5c:61:83:64:3c:cb:be:e9:61:
bc:af:a0:46:05:33:ea:a7:73:20:d4:37:4d:3d:15:
b3:c4:ee:eb:d6:ae:bd:3a:07:6a:b1:80:40:8d:76:
84:3b:09:aa:0a:46:8a:99:03:43:2f:6e:1c:c7:1a:
2c:e2:3e:53:32:60:25:11:79:1a:d1:0b:1f:db:33:
28:e0:bd:1c:01:27:6c:41:4a:d5:6f:55:37:d8:fa:
ae:33:dc:55:d2:28:91:dd:37:58:c3:9b:eb:f4:b4:
52:cb:3c:62:10:1a:fb:13:f0:c9:d4:44:d1:2e:c1:
94:88:32:e6:0f:21:fc:13:a1:a5:9c:28:04:25:96:
95:ce:5c:f1:2e:d7:b9:4b:65:88:33:54:e0:6a:23:
00:34:50:d7:20:06:64:9e:10:43:b0:23:63:56:a5:
9a:3c:d6:43:3d:e4:d0:43:6d:cc:d7:02:82:49:c2:
d8:19:a1:d8:0c:f6:bf:8a:49:14:0d:88:ef:48:b7:
f6:75:a2:93:7d:1f:b7:56:6a:71:d5:9e:6a:8c:9e:
fb:7c:25:56:7e:9d:c6:cf:9c:91:de:01:41:af:0d:
f2:1c:4b:30:e2:de:25:9a:b1:4a:14:23:c7:71:a8:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:D0:FA:1B:C0:FF:57:AC:A2:30:C1:3F:D8:A8:48:B6:58:51:83
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.22.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b9:9b:24:63:62:d3:a8:3d:dd:9b:91:95:1a:14:b5:09:1a:
60:a8:f7:10:7a:06:fd:7a:9b:4b:1c:9a:21:a8:48:ee:c1:48:
c2:80:fe:94:e3:09:c8:ea:f2:de:68:1e:42:77:52:de:6e:5b:
95:7b:e5:82:b6:42:21:b1:7d:02:1e:3f:78:08:9c:22:a7:07:
56:10:b1:c0:ba:ad:c4:b4:54:56:21:b7:25:da:48:be:1f:15:
cb:84:d7:50:ea:36:cf:40:92:a3:27:80:3d:fa:1f:ef:cd:de:
2a:2a:25:10:fe:eb:20:6f:a1:68:6e:cf:21:b8:47:9e:b5:e0:
98:9d:69:fa:3e:f7:80:ed:6e:6e:1a:9a:73:5a:ac:8b:c9:fb:
94:e9:7c:69:60:7d:15:7a:4c:0f:74:fd:e0:36:3b:f7:2f:db:
bc:1b:08:11:a1:2b:65:90:0a:d3:f1:f8:5b:a3:25:f4:c7:ed:
28:8b:af:16:59:bf:9e:26:d8:e7:10:27:24:46:35:3a:9f:0a:
92:f4:bb:72:46:8f:6c:41:70:f8:30:46:00:46:f8:41:29:11:
be:b5:11:ea:8d:30:e1:d1:46:5a:5c:c1:8b:d1:ad:ab:2e:77:
fa:a5:98:04:b1:7a:cd:06:aa:e5:7e:02:22:3d:49:d7:97:f6:
74:3a:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:28:31 2025 by rpki-client