Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
File: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (raw, json)
Hash identifier: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=
Subject key identifier: C8:1C:31:49:22:BF:DD:C6:61:FE:96:EB:D7:18:ED:A5:15:4D:EB:12
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 010A
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
Signing time: Thu 23 Jan 2025 03:16:58 +0000
ROA not before: Thu 23 Jan 2025 03:16:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 150729
IP address blocks: 103.73.184.0/23 maxlen: 23
103.73.184.0/24 maxlen: 24
103.73.185.0/24 maxlen: 24
2001:df1:dac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Jan 23 03:16:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6791b4a9-b442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:77:23:03:f1:03:f8:cd:f4:15:a7:4c:40:
7e:1b:15:3a:df:09:a8:fb:88:59:42:e0:85:7d:fc:
04:f0:09:24:92:bd:ee:a0:25:9d:1e:0f:f6:ea:fa:
6b:20:c9:d1:fa:ab:12:76:94:08:3b:58:6c:e1:4c:
ab:8d:3a:fa:6b:91:da:69:af:a2:6b:a7:a6:81:9d:
aa:5b:08:99:ae:06:3b:37:7f:12:5f:4a:9f:23:b0:
e5:4e:a2:5b:ec:f1:88:1d:c1:5e:f6:f1:54:03:31:
cc:70:fc:fa:d7:4e:01:09:f3:bf:47:c9:f0:36:78:
27:92:88:84:55:79:f9:f0:3f:81:4f:87:0f:76:c4:
75:6b:10:e5:25:f2:8d:5e:8d:1a:41:a1:d8:d2:34:
bf:c6:38:56:4a:c2:74:17:9b:09:16:09:ca:1a:48:
ca:bc:96:6e:89:d6:87:29:a5:a0:f7:5a:15:11:92:
8e:73:ed:ad:54:e2:21:94:a6:98:41:e7:45:df:3b:
f1:fc:68:fc:b0:3b:ff:3c:37:cd:d1:47:73:50:2d:
55:43:c9:28:3b:6b:c5:34:90:0d:3a:ef:76:fd:b1:
71:9b:f6:c6:11:94:09:a4:4c:3d:cb:64:f1:f3:f8:
6d:04:fc:2b:14:14:f7:48:17:9e:6e:8d:d8:ec:71:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:31:49:22:BF:DD:C6:61:FE:96:EB:D7:18:ED:A5:15:4D:EB:12
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.184.0/23
IPv6:
2001:df1:dac0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:43:70:a6:a7:0a:96:8a:db:fb:c7:52:9b:8d:66:61:63:fb:
c3:a7:79:3e:93:e7:c2:39:79:40:cc:3a:80:c0:75:3d:98:5c:
c7:66:33:de:1e:67:2b:03:57:51:36:6e:2d:da:7b:2b:97:20:
bf:8f:7d:e0:f1:ea:47:fd:fd:09:ae:ac:77:62:6c:d5:84:11:
b1:97:60:71:eb:3b:47:70:53:aa:bb:d9:a7:4e:ce:60:ce:b4:
d3:6a:64:6a:c7:62:c8:db:f4:89:3c:0e:8c:7f:fa:c2:5e:23:
d1:24:b3:18:dd:22:af:04:15:39:7d:7a:61:41:20:a7:31:4e:
10:66:e4:a6:c8:55:80:22:1a:16:21:f0:0a:50:2f:a6:e0:fa:
dd:3e:06:2c:d6:8b:f6:b8:fb:4c:f4:3b:12:9d:ae:33:26:bb:
b4:6b:e3:6b:9a:65:a0:8f:18:46:c3:f1:da:8b:be:dc:1a:dc:
7c:42:d7:3c:97:96:dd:1e:d6:4f:d1:54:6d:95:b6:61:40:f5:
41:89:25:d4:1c:37:b6:72:5f:b7:3d:18:d1:81:97:8b:90:d1:
ff:ab:e7:5e:a3:02:90:10:21:6f:d6:45:a9:43:1b:82:82:e3:
10:77:a0:b2:6c:a3:65:97:c9:c3:fb:07:53:4d:6e:06:e1:76:
34:47:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:25 2025 by rpki-client