Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa
File: E8053F36BC3011EA840E2A56C4F9AE02.roa (raw, json)
Hash identifier: DlgGGdYqrKN5h9MW9q70lTsP/SY3jDF+HYoYux1PP0A=
Subject key identifier: 1F:01:FB:70:9B:AD:2D:85:4C:C5:19:C8:93:67:08:9C:E5:92:AC:57
Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Certificate serial: 07C7
Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa
Signing time: Thu 28 Mar 2024 09:29:42 +0000
ROA not before: Thu 28 Mar 2024 09:29:42 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9311
IP address blocks: 103.224.56.0/24 maxlen: 24
103.224.59.0/24 maxlen: 24
202.58.30.0/24 maxlen: 24
202.58.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84
Validity
Not Before: Mar 28 09:29:42 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66053886-291d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:40:59:e4:f1:b9:80:df:ac:57:50:d7:d2:
58:d1:fe:0f:29:02:e4:36:8a:a9:98:00:e1:fa:66:
a6:f5:0c:6a:9e:34:51:28:fb:92:16:0c:6c:2f:f0:
80:86:7c:b1:0b:1a:61:fd:6d:cb:b3:3a:2f:5c:43:
d9:74:2a:e2:8a:61:70:30:c3:7a:fa:52:60:cf:89:
93:a4:f2:78:6c:c1:eb:8e:20:8f:3b:71:3a:ca:98:
f8:58:6e:f0:04:34:e2:18:74:8f:c4:3b:18:89:d6:
7a:ba:01:2c:ec:0d:2c:3c:0e:19:cf:ef:f5:7e:9d:
a0:1e:10:4c:b7:fc:e0:82:43:9f:d9:0f:87:07:93:
7f:86:77:ef:f7:97:5f:a5:82:0c:0b:62:97:fe:8b:
9e:d6:fc:7c:b9:73:2f:df:c9:7b:f1:05:9f:b8:e5:
52:32:fd:ed:58:19:5a:f6:7c:75:0a:95:70:a3:e9:
42:7b:96:1b:b7:50:79:28:90:06:e2:0b:ab:12:d4:
dd:a7:c0:c6:87:d7:48:bb:27:f0:7e:9d:ab:bb:a5:
58:c8:09:30:78:f9:1e:85:1e:81:61:21:23:87:0a:
d5:59:98:e2:02:b8:4f:61:25:de:23:27:23:bf:d8:
55:cc:a8:40:d9:3e:f1:38:dc:6b:05:5b:76:79:35:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:FB:70:9B:AD:2D:85:4C:C5:19:C8:93:67:08:9C:E5:92:AC:57
X509v3 Authority Key Identifier:
keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.56.0/24
103.224.59.0/24
202.58.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b8:2c:e4:e6:31:bb:08:d0:56:de:af:15:99:c1:dd:56:14:
2e:f2:5a:b6:84:ee:4f:5c:11:aa:0c:e3:4c:e6:99:ec:99:0d:
b4:0f:24:9c:b5:98:d3:50:54:fe:b4:ef:c0:53:15:00:c2:6e:
96:e2:7b:d2:c5:7a:74:79:f9:e4:b5:09:62:13:3b:aa:0c:06:
57:79:d6:5a:3e:fd:fe:db:48:76:c5:30:4f:ac:12:b9:f9:94:
04:d2:a1:4b:21:5e:d4:bb:18:81:f5:62:98:45:42:25:14:e1:
17:8a:bb:2f:d9:b4:a7:f9:da:27:be:2a:12:83:62:ab:25:02:
5b:df:5c:53:50:7b:eb:b3:da:c4:64:60:6b:26:a0:e6:03:49:
bf:f6:5f:45:02:6c:c1:74:4d:4c:e2:d7:c3:9c:00:16:a8:28:
f7:82:70:48:1c:18:a2:b4:4a:16:ab:53:af:9e:2c:1f:37:17:
de:a6:0b:ad:2b:44:3d:05:ee:7e:ca:f1:0f:5d:f8:d5:5e:0f:
51:a1:75:74:3d:13:3f:c8:22:f0:78:4d:74:c8:b1:53:59:cf:
a7:4e:d1:a5:39:ae:e5:a5:d5:8c:1f:1a:6e:6a:47:92:25:2a:
dc:c5:4d:5a:5b:e7:78:64:6b:a3:f3:c4:d5:78:1a:ab:ac:ea:
66:5e:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:45 2025 by rpki-client