Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
File: AC623530A86211ED9ED67945C4F9AE02.roa (raw, json)
Hash identifier: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=
Subject key identifier: EC:3F:3E:24:4B:99:24:85:CB:F5:A5:1F:BD:DE:30:3D:3E:02:CB:83
Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial: 0169
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:45:56 +0000
ROA not before: Fri 03 Jan 2025 02:45:56 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 150753
IP address blocks: 103.67.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Validity
Not Before: Jan 3 02:45:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67774f64-8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:f9:dd:83:6d:cc:be:da:17:23:c2:84:56:
73:8a:44:b8:a7:c8:ad:01:99:2d:91:4e:b9:77:32:
f8:5c:36:09:39:a3:86:a5:31:7c:7f:35:a8:db:ba:
e3:7e:91:3d:3e:7b:85:b8:2e:00:fe:32:a8:4d:74:
6e:7a:1a:04:51:93:8d:ab:70:f3:ee:32:f8:f0:65:
21:82:a8:b5:e3:96:c6:3e:46:f0:e6:52:fb:38:0a:
a9:14:48:21:16:f0:67:a3:08:43:c3:71:90:63:53:
5a:7d:4d:57:01:de:cb:12:7a:99:7a:b6:ae:94:0b:
1e:43:0f:f0:47:e8:d7:d3:f3:20:be:b7:a1:f4:6e:
96:4e:1b:23:4a:81:b5:4d:24:03:34:59:db:64:91:
43:f1:20:62:6a:f7:e8:b1:24:18:82:68:18:d3:4b:
f3:80:77:ed:bf:8e:f5:38:af:64:42:6a:aa:2a:ef:
66:ba:a4:04:a1:10:d7:16:0b:bc:3f:84:f3:59:dc:
99:bb:fe:e7:5e:06:f0:d9:f6:84:73:8d:e4:a5:c1:
7a:3d:14:a5:2d:6e:55:04:cd:bd:f1:03:be:de:4b:
2a:f2:d4:d5:ad:3f:7c:e8:50:e8:41:6a:fc:5c:16:
a4:bd:39:60:4c:e0:8b:53:2a:fa:fa:e4:23:f1:88:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:3E:24:4B:99:24:85:CB:F5:A5:1F:BD:DE:30:3D:3E:02:CB:83
X509v3 Authority Key Identifier:
keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/AC623530A86211ED9ED67945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:c0:0a:e9:35:f4:e3:8d:d5:77:07:b5:5d:23:a5:15:cd:
51:71:fc:d7:6c:80:76:54:71:2c:e4:6f:ee:87:eb:df:b7:c1:
72:a8:ff:e2:70:2a:eb:e5:5b:4c:f9:a7:59:32:d6:17:97:4d:
9f:3f:7a:c1:0e:21:ba:b0:b2:22:d9:27:60:82:e5:34:42:68:
45:f0:01:6b:55:61:29:5f:47:ea:14:37:fa:dc:71:f4:32:24:
f5:30:d1:22:0f:53:d9:e1:e7:3d:e1:43:fa:5a:f6:1f:76:21:
5e:db:41:ad:54:ed:9f:7a:26:7b:1c:bb:95:00:fb:8e:43:6d:
1b:fa:8b:bf:3a:64:d1:ce:09:50:0c:1a:bc:43:32:14:a1:93:
e2:31:14:9e:a1:14:51:a2:71:7f:86:b1:68:28:80:71:72:e7:
0a:b2:be:5d:c5:c9:ae:54:93:cd:18:4e:45:6e:14:8c:00:2a:
05:7d:06:8b:07:af:f2:5e:65:7b:33:a2:35:da:74:be:26:c8:
cc:c3:13:6b:bb:7a:dd:82:1f:16:2c:e5:a7:fe:ea:04:39:35:
f2:f8:be:94:70:f7:fd:6b:25:bd:d5:28:92:66:18:f3:c0:c7:
7e:1c:3c:99:1b:90:c1:de:6a:28:37:cc:e8:16:c0:67:29:32:
87:8b:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:54:03 2025 by rpki-client