Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
File: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (raw, json)
Hash identifier: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=
Subject key identifier: 8E:8E:8F:83:A3:B1:AF:52:D3:BB:4C:49:84:25:56:6A:3F:F7:1F:AB
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 17FE
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
Signing time: Wed 04 Dec 2024 16:53:58 +0000
ROA not before: Wed 04 Dec 2024 16:53:58 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9512
IP address blocks: 103.101.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6142 (0x17fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Dec 4 16:53:58 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67508926-1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:e0:41:c3:62:f0:51:aa:a9:5a:2f:44:6f:
df:1a:a6:d4:d5:86:7c:6b:f8:a0:fe:71:51:d4:76:
03:3b:e8:06:78:5a:f3:c2:f0:97:8e:04:bc:c7:63:
3b:9f:1a:69:7a:7f:86:f3:fe:ec:e4:4e:4a:33:1d:
b0:e9:f7:7b:22:9a:69:ab:55:93:08:f6:cc:51:88:
89:98:cb:0f:28:9f:8c:cd:5a:74:68:b7:21:dc:d8:
bc:a4:a6:8c:0b:35:29:c6:1f:89:4d:fe:23:70:b5:
8a:75:94:08:bd:f2:6a:64:5b:bd:93:de:cb:45:6b:
ff:fd:d4:df:73:13:c5:af:e0:42:dd:24:c9:f7:34:
19:a6:22:47:c0:97:12:d1:b2:82:fb:cf:1c:70:0d:
4d:af:8b:b6:ec:90:30:e6:57:61:06:8e:94:1b:31:
09:c5:0a:e2:d8:72:e1:9d:e8:61:9b:d0:eb:e7:a6:
b6:10:cb:3f:16:40:fe:2b:4e:f8:c2:c1:b8:c3:0b:
fb:04:60:cd:d9:f2:a2:4f:35:d9:4a:c4:d1:46:dc:
2e:78:75:41:91:15:e0:a2:14:e0:f4:68:ec:84:54:
31:ae:85:65:be:93:79:b7:ca:48:ad:98:79:2b:9f:
e7:ea:18:6d:9f:31:fd:68:fc:9c:e9:31:da:58:c1:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:8F:83:A3:B1:AF:52:D3:BB:4C:49:84:25:56:6A:3F:F7:1F:AB
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
87:99:d7:f7:59:4b:e4:95:d9:0b:16:43:95:e7:59:43:6f:04:
30:9b:73:fc:5c:d5:ec:6a:4c:60:80:ea:4f:fe:09:48:43:7a:
54:04:b7:89:71:19:85:22:5d:d6:59:cd:1d:16:8b:85:16:a2:
7d:1f:ae:ce:c2:37:be:44:5e:66:23:67:e0:3b:9c:1a:6d:2c:
3d:03:22:27:8d:37:74:0e:e2:af:c2:b1:ae:01:79:43:e2:28:
11:ce:c8:75:ed:ca:ea:02:4a:b2:c9:4c:c5:3e:2b:d2:65:42:
44:15:24:56:d2:50:29:03:d7:c1:cd:8e:8f:b9:6d:54:17:01:
06:82:c6:84:1a:65:a0:88:c2:a4:de:6f:75:79:07:01:85:87:
d6:5b:88:d2:4c:f7:df:9f:85:f9:93:f9:75:4e:c4:c2:29:d2:
9d:b4:c3:3c:70:1a:5c:08:d9:26:a3:53:db:fa:de:d1:bc:98:
c6:3b:78:6b:ca:2b:78:37:19:d8:34:59:6b:1e:fd:11:de:e9:
04:cd:c6:f8:6e:eb:2a:71:47:d3:12:05:4f:42:d0:d6:10:5b:
00:e8:c0:37:ac:22:c9:91:58:79:ab:09:a5:26:a9:a9:16:1e:
1a:c9:1c:81:de:03:8d:65:93:80:92:05:f0:14:f7:c4:15:ae:
38:ae:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:30 2025 by rpki-client