Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
File: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (raw, json)
Hash identifier: fh/nPQv/nYQcKywo8IbkfJ3ertJ4PhkZqi8lqFawXaM=
Subject key identifier: 56:7D:04:50:F6:97:4D:59:66:D2:65:32:6A:41:F7:8F:DC:0C:F1:6E
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 0220
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
Signing time: Wed 21 Aug 2024 03:16:08 +0000
ROA not before: Wed 21 Aug 2024 03:16:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150004
IP address blocks: 103.190.128.0/23 maxlen: 24
2400:9060::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Aug 21 03:16:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c55bf8-3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:6b:de:3d:e7:94:a2:67:58:be:fa:89:22:
24:a6:e0:cc:5e:46:53:37:f5:7b:4a:c7:7d:28:07:
3a:1c:66:60:9a:24:ee:6f:28:a4:14:21:7a:22:79:
46:73:1e:cc:08:87:5f:51:55:5b:a8:a3:b0:12:8a:
6a:db:ad:99:79:e4:c4:ff:a5:02:fc:7b:d2:05:d9:
d4:3e:2d:b7:00:90:5f:79:12:4c:63:db:88:8e:7f:
bf:3a:77:1d:5f:bb:ca:92:e0:c8:bf:bc:bf:12:b0:
e5:8c:a5:ab:75:e1:01:80:cf:2a:1f:df:50:14:66:
c1:f1:18:12:95:8f:36:29:b3:70:d2:0a:25:e5:9b:
21:24:9d:f0:8d:b9:53:ff:f7:0e:b4:9a:af:74:52:
d3:1b:9a:a3:d9:b6:5b:72:1e:eb:4a:0b:15:1f:ef:
53:af:fa:b9:5d:b1:46:2a:f2:3e:56:32:83:b2:60:
4c:5b:fe:6c:2e:49:5c:8f:d3:c3:0a:ae:46:d9:e8:
3d:c1:b5:fb:27:eb:ee:4b:af:41:ec:82:03:81:f1:
63:0b:1e:95:f4:ab:33:70:a2:4c:bf:c5:6d:27:b4:
77:f1:3a:37:41:fd:64:80:53:88:9d:a8:20:eb:19:
27:20:fe:77:8c:bb:f3:79:61:c4:46:38:f8:82:e5:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:04:50:F6:97:4D:59:66:D2:65:32:6A:41:F7:8F:DC:0C:F1:6E
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/7142EF7E30F511ED91FE0B2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.128.0/23
IPv6:
2400:9060::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b6:1e:e0:3e:4e:f9:e6:c3:9b:3d:1c:a9:a8:e3:f3:59:49:
33:ad:fb:ee:3d:18:c1:34:19:ec:38:94:18:29:bd:22:b5:bd:
ae:83:8c:e4:62:f6:78:eb:2d:f6:f2:a6:29:9f:b3:32:48:47:
2d:1e:b5:4a:4c:79:67:32:e4:32:5a:db:05:e1:ee:db:7e:ce:
60:0c:8b:a9:67:a9:75:8c:84:03:cc:bc:f1:c9:b8:8c:80:50:
0d:30:fe:e4:b8:60:f1:64:2c:a2:b2:a8:f6:c6:3f:b0:2a:09:
96:89:b9:22:c1:0c:bc:47:24:95:be:67:66:9e:6f:c7:ce:94:
f3:45:60:ca:f8:95:31:dd:b8:fa:c9:2f:9f:d6:28:13:e4:8a:
19:3d:1f:a7:b0:cf:2e:39:fd:82:5a:95:ed:62:e2:1c:02:07:
53:83:d2:ab:3f:f7:b0:26:6a:15:4f:76:d7:f7:6c:14:2e:94:
9b:21:f6:b6:76:80:3f:f8:f9:07:84:32:b3:2d:18:aa:34:fe:
d3:c6:81:cc:64:7e:6c:83:81:df:21:f0:d3:43:bd:bb:db:18:
33:c6:21:76:24:af:18:c0:87:62:eb:c5:a3:50:62:eb:3a:66:
64:64:f3:d5:c7:26:d7:ee:01:07:b6:15:9f:45:f6:98:89:2e:
59:1d:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:23 2025 by rpki-client