Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
File: E26E62FC008211EE9714031BC4F9AE02.roa (raw, json)
Hash identifier: +KyX9vvCwN+wQz/+dPxZBeEKewfgwPoob9Rj+QTsatE=
Subject key identifier: 60:AA:76:D1:A4:BE:E6:EA:15:11:58:3F:C3:34:7F:ED:AD:C1:0A:47
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 022A
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
Signing time: Wed 17 Jul 2024 03:25:04 +0000
ROA not before: Wed 17 Jul 2024 03:25:04 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 150750
IP address blocks: 103.190.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Jul 17 03:25:04 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66973990-2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:f6:84:fc:bd:79:d6:61:da:d6:26:6e:25:
b9:bb:b2:fe:21:91:b8:a5:4d:42:41:0f:85:d1:f4:
5d:c7:3d:6c:a4:fa:5e:50:e9:ff:38:fd:51:13:33:
80:4e:89:e0:c9:2a:05:58:c0:28:1f:0a:b9:f3:20:
b0:7c:e9:b0:e1:4c:37:c4:47:d6:5e:c6:4a:2b:87:
7c:21:af:36:02:37:dc:bc:32:22:0b:fc:0f:36:cb:
09:cf:e6:fe:03:ad:98:af:1f:d4:c2:44:52:2b:89:
b3:60:20:08:27:85:14:45:8c:a2:12:10:0b:8b:83:
bd:8c:66:39:73:99:fb:05:d5:74:38:73:b7:d5:d3:
f0:10:89:3b:b5:2e:7b:63:bb:00:82:0a:a9:3d:71:
36:dd:fb:96:86:25:7c:69:4a:cb:e4:47:63:64:a6:
e8:e9:80:45:8d:0a:22:f3:b5:8a:3e:60:45:2e:02:
c0:6a:df:40:93:98:27:0f:dc:6b:b3:a5:fa:83:44:
0a:07:80:89:6a:9c:86:35:59:64:e7:9d:ce:14:5f:
fc:9d:e9:f6:25:91:5c:bc:1e:80:47:29:27:44:20:
68:d6:df:b5:0c:80:fb:ae:34:c4:6a:18:68:e4:98:
d8:8b:21:9b:a1:c4:8e:d8:f8:77:f4:3f:6b:6f:cb:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:76:D1:A4:BE:E6:EA:15:11:58:3F:C3:34:7F:ED:AD:C1:0A:47
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:96:ab:fc:a0:b2:59:c6:a1:c8:c4:94:e6:f9:07:a0:63:2e:
c3:df:04:f6:5d:51:8a:3d:66:5b:8b:ab:e7:c0:b6:5b:49:a1:
6f:db:d8:2f:35:fc:bd:67:50:62:32:0c:f7:84:c1:53:41:91:
2c:69:74:5b:49:23:1b:f3:0c:a7:5e:ab:d4:82:4b:23:d6:d9:
2d:69:d7:63:97:1d:fc:6d:bf:0d:b5:90:80:be:67:7e:86:a0:
7d:f4:1a:5e:f1:e9:de:d6:be:11:92:cd:1c:21:3c:e0:1b:c8:
a1:54:12:4d:63:f4:7d:6a:d7:ff:91:dd:13:c4:dd:a4:77:a7:
25:f7:f5:5b:72:cc:3b:2e:56:75:88:2e:d8:4d:dd:c5:c8:21:
ed:af:b5:16:5e:9b:47:f2:d6:5e:07:7b:e9:c5:2a:b7:85:84:
fe:07:fa:95:5d:c2:3c:21:8d:a2:75:b5:02:79:4f:8f:94:08:
ab:c6:1d:20:2b:76:2b:07:4e:5e:f1:ae:a7:5a:28:2f:8a:1d:
27:e1:1c:26:bb:bf:be:cb:07:2a:57:ef:05:96:7f:77:d7:09:
d5:e5:d3:0c:16:4e:34:46:b4:aa:00:4e:fc:d9:af:3e:22:68:
be:36:b7:a0:54:93:71:86:c5:d0:b8:ac:f5:06:69:9a:54:7e:
f7:12:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:52:14 2025 by rpki-client