Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
File: B97D647C1A8811EEB5AE963CC4F9AE02.roa (raw, json)
Hash identifier: ZeCYlYIZOe18L8obkQDh8oWchb2x2gc6pA83/iYindw=
Subject key identifier: 11:99:A5:81:61:91:F5:CB:9E:F5:30:48:01:B1:25:5F:CE:7A:F0:AF
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 7D
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
Signing time: Fri 09 Feb 2024 06:08:01 +0000
ROA not before: Fri 09 Feb 2024 06:08:01 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.73.186.0/24 maxlen: 24
103.73.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Feb 9 06:08:01 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c5c141-ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:2b:a8:70:8e:02:20:e7:d3:35:e2:54:3b:
72:c6:8c:ee:37:98:7e:17:e6:99:3d:ad:b8:8c:f7:
dc:8b:0f:53:ce:2d:8b:a4:2a:79:dc:8d:6d:77:9c:
29:45:2e:f6:b6:5f:e1:a7:21:d4:10:63:37:ed:e6:
ae:b6:dc:3c:af:76:c6:0a:75:7f:d3:8d:87:bd:1b:
83:66:b6:4c:2c:43:2e:88:1e:8b:81:50:63:00:a8:
30:63:cc:2f:62:3c:52:07:fd:d6:cb:70:5a:b3:de:
d3:d7:f4:64:40:f1:de:5b:cc:4b:d5:92:32:b1:e6:
9f:f1:a7:36:37:d6:b0:45:7c:cd:2c:da:b4:c8:9d:
e2:35:cd:66:2f:78:58:64:dd:13:a4:cf:52:e6:d8:
06:56:6e:67:1d:6f:05:97:98:a8:8d:fd:86:e6:67:
cb:80:37:f7:96:d1:fd:16:33:c2:1d:50:fa:4b:58:
2b:ef:5e:10:77:e0:bb:d8:ef:40:9b:a2:56:58:75:
4c:28:c0:62:7f:8a:85:fb:50:99:bc:54:fa:fc:cb:
2b:c1:29:2d:2c:cc:e1:22:2d:0e:56:76:30:ca:21:
a6:4c:44:5c:49:7c:c1:b3:f0:6c:87:ab:78:ad:3d:
d9:10:90:40:1c:e7:26:6c:88:59:da:75:ef:0e:b8:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:A5:81:61:91:F5:CB:9E:F5:30:48:01:B1:25:5F:CE:7A:F0:AF
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:28:29:c8:1e:f7:30:7b:6c:67:86:52:6f:c2:f2:6b:a9:c3:
ed:6c:88:b5:aa:99:ee:6f:95:ea:5e:34:51:48:85:21:20:69:
c0:9c:09:4f:44:7d:22:47:09:62:20:98:8f:cf:a5:a1:6b:23:
54:9e:e6:37:b5:d5:2f:13:14:ee:23:04:96:53:75:27:ae:fe:
70:53:df:0e:c6:e5:1c:43:0e:7b:ac:d6:bc:7e:b7:aa:b8:95:
be:5c:61:74:90:fc:1b:47:7d:c2:3a:de:c9:4b:48:a5:5a:3f:
87:c0:6e:82:7e:23:9f:c0:98:f4:1a:bc:af:4d:9b:66:9a:20:
80:62:b5:8a:1f:a7:47:46:11:54:93:24:58:c6:cc:92:70:8e:
58:f0:9d:71:9f:62:d1:57:71:9a:b1:29:d0:79:06:79:37:bd:
ab:d5:ee:82:b8:3d:cc:61:2c:19:e2:ff:5f:95:a8:7d:a1:d8:
71:e0:8f:35:72:d5:54:db:72:dd:5d:ba:5d:f7:51:22:d5:d8:
ca:3f:33:8b:92:83:18:05:21:65:1e:ce:16:14:40:27:23:f1:
a2:dc:ff:6c:7c:b7:96:7b:89:3f:dd:0d:fc:d7:27:8d:9e:62:
c2:f3:34:15:3c:59:70:e7:12:52:36:38:a9:03:78:6b:b4:e2:
c7:a3:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:57 2025 by rpki-client