Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
File: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (raw, json)
Hash identifier: fMsxwSBq4vOI9x94F7ZUIJaq0Vm1i1Kp/JyIJ4qnrvY=
Subject key identifier: A5:89:4E:C8:27:B6:D1:ED:35:6A:5B:D2:71:6B:FC:DC:03:E3:EF:1F
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 08E4
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
Signing time: Wed 08 Jan 2025 03:55:29 +0000
ROA not before: Wed 08 Jan 2025 03:55:29 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 137199
IP address blocks: 103.101.234.0/23 maxlen: 23
103.115.12.0/23 maxlen: 23
2401:d6c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Jan 8 03:55:29 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=677df730-4bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:7e:c2:52:05:8b:06:fe:2f:e4:09:96:a2:
79:63:8c:8c:fd:1d:d8:09:19:78:03:72:b8:c4:c1:
34:0d:00:43:28:88:3a:a3:01:95:82:b2:90:00:a6:
b2:e9:22:27:87:b7:45:81:5b:16:a5:77:29:c3:f6:
8a:50:d8:5d:e5:a7:53:7f:6c:25:a9:88:58:9c:ee:
d6:51:57:07:7c:27:03:7d:d2:7b:7a:c6:9c:ce:a1:
45:d2:cc:06:e7:2a:53:a7:cf:c7:0a:9d:30:53:ae:
c1:f8:a1:53:d9:fa:a9:10:78:e8:86:63:7e:ee:ce:
a2:0b:54:98:05:3d:eb:cb:f9:c6:e4:d5:c6:49:50:
e1:ef:35:2f:58:79:32:38:a2:0b:61:fd:38:06:5a:
a4:95:b8:2b:6a:99:82:ca:06:96:5b:81:74:f0:dd:
70:8c:4c:a1:14:f8:71:fb:fd:14:ff:ca:85:33:81:
f4:e0:6c:e8:1d:c3:10:d3:5f:63:5b:92:1c:75:c3:
56:31:d5:90:ea:71:8b:d7:fa:e4:4e:2d:c7:95:fa:
9b:48:a1:db:06:72:33:1c:64:ab:2a:ef:35:a3:56:
45:58:d4:86:7f:43:fc:3c:ba:a9:50:e5:9a:2b:eb:
d8:a2:37:43:38:4d:2c:06:93:c4:7d:1f:8c:d7:db:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:4E:C8:27:B6:D1:ED:35:6A:5B:D2:71:6B:FC:DC:03:E3:EF:1F
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.234.0/23
103.115.12.0/23
IPv6:
2401:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:bd:27:aa:8e:15:89:82:40:ef:71:f8:6a:2a:b1:e1:26:86:
63:17:40:d7:dc:8e:98:b0:53:47:4f:d4:77:e3:e0:11:5e:99:
8b:76:40:78:87:ab:ca:29:39:dc:50:38:2d:e3:b1:cf:46:a6:
9d:fe:1c:cf:c9:fd:a7:14:78:ad:49:39:f6:d0:60:a9:9e:5b:
e3:a7:01:e0:fa:50:23:8d:1c:cb:cc:64:e1:d0:1c:aa:de:a6:
e9:45:48:f7:16:87:37:e6:35:d3:70:90:73:ca:79:29:0f:f1:
76:30:b2:4b:ab:86:95:7c:f5:cc:74:c5:74:4c:44:02:fd:35:
4a:0f:8c:f8:f7:4f:ca:6d:64:b3:08:46:26:d1:cb:6b:37:6b:
92:88:26:36:74:69:f4:cb:b5:d7:2a:7b:4a:50:c8:47:f7:2e:
dd:c5:0e:88:6d:81:da:a4:97:81:83:98:f4:5f:98:ad:15:a6:
92:10:1c:20:2f:b7:38:68:f7:f4:bb:be:d2:68:a3:63:18:19:
24:e2:5e:00:90:ef:45:57:97:e1:23:76:85:62:c8:9d:e5:ce:
ba:cb:a8:f6:3b:a0:68:7e:78:55:26:7b:83:96:46:7b:73:e3:
da:a4:f9:38:c4:d1:79:45:9b:b4:0c:b0:6d:29:61:f9:57:b7:
d9:23:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:38:30 2025 by rpki-client