Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
File: F4E06C32804911EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier: WAsxR3gUGPm7QfrlwKZUh4UAYIGFdHFlPZC5ufPYCVY=
Subject key identifier: D2:BA:1F:A2:D7:7C:18:FE:16:46:6A:6A:90:45:04:94:DF:17:8B:77
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 09DB
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
Signing time: Sat 02 Mar 2024 20:59:03 +0000
ROA not before: Sat 02 Mar 2024 20:59:03 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140224
IP address blocks: 103.148.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Mar 2 20:59:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e39317-8f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:0a:99:00:5c:70:9f:d7:e8:d2:c7:1e:4e:
82:8e:f1:b7:3e:5b:0d:0e:70:7e:3e:0b:a8:21:30:
e4:c7:cd:ca:06:db:bf:ff:b3:60:ff:ab:bb:e4:31:
56:1e:a4:ed:40:69:e9:dd:8e:96:2f:bc:28:37:49:
89:25:74:ba:ac:af:a8:b2:8a:5a:dd:57:38:03:db:
70:e9:b9:d0:52:f7:0f:eb:31:b0:f1:77:7b:f4:5c:
dc:58:ab:f5:bf:85:8c:de:b7:4b:49:12:98:92:a2:
5c:28:ca:e0:b4:c5:e1:d1:86:9c:66:a3:5f:9d:a7:
d6:ac:b7:71:f0:45:6b:15:68:9c:b3:fa:fa:d9:7d:
32:d4:47:3b:bd:02:e0:75:5d:d3:d9:2e:81:89:ab:
bb:88:29:dd:7c:48:18:c7:3a:b4:8a:81:ba:58:0a:
77:2e:3a:78:ed:6f:90:80:39:c7:26:d4:e2:ee:a7:
a8:0d:5f:e7:2c:c1:fb:45:5a:f0:52:8c:45:f9:fc:
ce:87:90:83:d1:65:9c:18:64:30:2f:4e:04:1e:ad:
93:4c:77:7e:9a:bc:0e:c8:f8:d8:6b:9d:44:58:9f:
88:fe:5a:68:be:9e:d1:de:0a:ac:81:16:e0:8a:09:
05:9d:59:1b:bc:90:d7:7d:84:e6:03:e1:99:d5:94:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:1F:A2:D7:7C:18:FE:16:46:6A:6A:90:45:04:94:DF:17:8B:77
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:c7:cb:ab:ff:0d:cf:b6:1b:77:bc:2b:ec:7f:ba:e9:64:ab:
54:83:e3:94:22:f2:86:56:a9:05:7a:5c:5a:30:94:55:6e:13:
29:0b:e5:60:45:9f:29:d7:ad:e7:f0:5d:fd:1d:8b:b3:9b:6f:
e1:c2:32:8e:e1:c5:4f:b3:9e:bc:45:df:11:60:a9:ab:b1:7b:
ed:59:f7:72:7b:a5:7e:c8:69:96:01:7d:a4:ff:b0:ad:d2:0d:
47:74:86:29:aa:9f:14:f1:42:27:20:da:2d:f1:94:87:74:4a:
6a:f8:94:b4:83:14:9e:01:18:0e:6d:8c:63:6a:e9:82:d0:ac:
e5:32:57:a1:d4:26:ed:ec:b6:a3:4b:43:c3:80:6e:bd:a5:1a:
51:33:1f:0a:23:34:47:e2:d0:ef:d6:22:bf:22:6f:ec:6a:e8:
b5:dd:fa:d4:26:3f:31:dc:d4:02:93:e2:cf:23:dd:08:9f:33:
70:47:4d:17:4e:da:75:a6:50:bd:1d:75:05:82:55:e7:61:8b:
3c:46:2b:a2:70:2e:60:1f:6d:86:d9:45:7f:74:48:ad:cd:55:
c5:49:25:ad:40:6e:d0:88:35:ed:93:92:1d:07:a5:18:81:c6:
e6:ea:43:ef:06:26:88:c6:68:1c:82:eb:e0:f3:ec:35:07:37:
90:19:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:15 2025 by rpki-client