Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa
File: C0E4A11270EF11EFA9113E35C4F9AE02.roa (raw, json)
Hash identifier: VfCdmQ/X3zww3cAEOvzsdLP4ylfmjt95PfZFCQi6HBE=
Subject key identifier: E9:70:62:A5:EA:3C:22:BF:5C:E5:15:1C:9C:D3:35:80:A1:75:2F:EB
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 021F
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa
Signing time: Fri 13 Sep 2024 04:49:34 +0000
ROA not before: Fri 13 Sep 2024 04:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151106
IP address blocks: 103.227.210.0/24 maxlen: 24
103.227.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Sep 13 04:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e3c45e-a9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:a6:65:70:d2:89:a0:77:9f:c2:cb:4f:80:
2c:18:c9:bf:94:06:6d:b9:69:75:92:1c:e4:8c:c5:
60:45:80:97:db:57:21:97:87:b4:f0:45:8e:5f:36:
54:73:00:99:0f:98:9e:a3:31:28:3d:56:4d:0e:63:
2a:1d:fd:f5:05:39:77:2a:63:cb:5d:08:f2:2c:fe:
91:87:82:24:c3:5e:46:83:a5:77:7b:7c:36:4a:ac:
37:3b:69:9c:f9:00:c7:8f:c7:67:b7:8e:9d:48:92:
fa:15:26:21:38:8a:b3:f7:60:34:2b:cd:d9:e9:5d:
4e:b8:f2:40:ec:5b:b3:26:11:72:8f:c2:1d:fc:64:
57:71:2c:94:b9:74:42:64:af:ee:a5:80:68:10:96:
83:b9:24:67:ba:b0:57:14:24:df:53:25:94:b2:a8:
30:eb:c7:12:78:9a:1e:aa:f7:58:88:43:bd:44:7c:
38:7f:a9:ec:e2:b1:00:6c:6c:7e:94:a4:99:ab:3b:
b4:60:a4:e5:87:d6:03:5e:8b:5d:a6:2b:2d:92:c3:
89:15:e9:1d:e2:02:7d:8c:c4:41:a6:2c:5d:48:1c:
ad:61:0d:97:e4:0d:cc:dc:70:0f:7e:20:ec:c9:1d:
77:be:f2:e8:c5:57:98:f6:78:0d:ac:cd:87:87:30:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:62:A5:EA:3C:22:BF:5C:E5:15:1C:9C:D3:35:80:A1:75:2F:EB
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/C0E4A11270EF11EFA9113E35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:5a:0d:02:d9:f5:6b:6b:5a:09:ac:30:d7:0f:63:7c:5d:12:
dc:74:bb:e3:0d:7b:37:a5:e3:f2:f1:74:25:b9:63:81:d3:6c:
07:bc:86:3f:1f:97:7c:f4:90:41:70:5e:62:da:24:91:52:87:
f7:d9:5c:b7:f3:ab:8e:43:29:d5:5c:b5:61:42:9e:42:da:ab:
a6:04:b8:dc:6e:50:ba:dd:03:24:a3:e8:a3:6e:41:13:ad:42:
97:8e:5d:3b:93:38:d7:28:f1:c9:2b:51:36:80:9e:b9:8b:cb:
4e:64:68:b4:e1:a3:44:d2:77:e8:8a:16:fd:b0:cd:2e:58:5f:
f8:98:7f:dc:d1:1a:1b:1a:30:a2:c7:15:d5:a7:50:28:de:08:
61:57:90:7b:2b:c9:f0:9d:d6:3f:f1:d0:6b:91:e8:10:4d:22:
88:2d:c2:c7:be:a8:26:da:ee:d9:55:66:94:32:7e:ca:a8:8c:
9c:2e:fa:38:79:ef:f3:da:84:6e:6e:1a:93:b7:9c:50:cb:bd:
58:4f:18:ec:f9:b8:17:bb:92:9d:b1:b1:11:ec:23:3a:30:3e:
d6:12:e2:63:8b:9c:10:ec:fa:f0:75:60:b1:3d:cb:07:db:63:
15:00:4d:2d:b7:b2:77:71:8f:52:53:91:5e:c2:36:17:01:e3:
35:ff:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:25 2025 by rpki-client