Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1E5E9AEAC81211EFB612B471C4F9AE02.roa
File: 1E5E9AEAC81211EFB612B471C4F9AE02.roa (raw, json)
Hash identifier: ta3kqZ6slZkLymJ1Y+FGbOuuzC0KBODU2j3d2RnD6NM=
Subject key identifier: 4F:56:43:99:A5:65:65:A5:1E:BE:B2:ED:28:A2:9B:D7:CE:15:99:79
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 0210
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1E5E9AEAC81211EFB612B471C4F9AE02.roa
Signing time: Wed 01 Jan 2025 07:29:22 +0000
ROA not before: Wed 01 Jan 2025 07:29:22 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151786
IP address blocks: 103.7.4.0/24 maxlen: 24
2400:ac20:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Jan 1 07:29:22 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6774eed1-6099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:f8:80:69:03:53:21:19:6b:44:05:05:12:
28:4f:2d:30:46:22:f7:92:53:ab:d5:13:99:a3:3e:
0c:25:86:74:d7:24:8a:02:72:e1:b7:00:37:7e:c9:
cd:64:f0:ca:dd:ac:71:25:7f:55:71:3a:fe:bd:dd:
b1:9b:9c:84:fd:4b:d0:2f:6c:88:95:2f:de:08:d9:
d3:d6:b7:35:d6:e2:15:df:ff:4c:e8:fb:d4:73:8e:
82:b5:60:8c:46:28:e2:6b:6f:a7:b4:5e:d9:df:ba:
76:2f:e2:c3:ac:0a:05:05:09:d3:65:5d:69:d1:43:
4d:cb:20:4b:d6:bd:62:48:c8:50:ea:a8:18:76:7b:
b3:2c:02:75:a4:06:9d:78:6c:3c:fe:6c:e5:c2:71:
24:05:08:aa:c9:ae:97:bd:1d:b5:10:34:58:43:65:
41:39:a4:0d:9f:1c:c1:5c:b1:a9:8f:0d:51:28:b1:
ce:c0:53:51:19:d6:02:92:b3:4a:da:2c:a4:56:6e:
86:73:9a:8b:5d:8b:af:64:ba:f8:9b:29:f9:22:06:
ce:e7:12:1d:86:63:48:1e:83:23:a7:a4:cd:c4:39:
05:68:f9:9b:26:26:bb:10:22:7a:c2:99:87:e3:a7:
c2:8d:c6:7e:1e:3d:38:b6:6d:b9:d7:be:2e:db:6d:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:43:99:A5:65:65:A5:1E:BE:B2:ED:28:A2:9B:D7:CE:15:99:79
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1E5E9AEAC81211EFB612B471C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.4.0/24
IPv6:
2400:ac20:3000::/36
Signature Algorithm: sha256WithRSAEncryption
96:5f:85:29:2e:5e:b8:44:84:1d:03:93:27:5d:87:73:6b:cf:
a4:f7:55:ea:cc:25:ae:dc:31:c5:3a:29:ec:fd:8a:54:42:91:
0d:2c:f0:8f:b6:7b:a5:cf:43:e9:08:f6:ed:d0:f7:1b:e1:39:
86:54:1a:00:cd:20:e5:ee:d6:2d:ea:d0:ac:24:1b:dc:2e:68:
b6:57:e2:3f:1c:0d:22:5b:42:76:9d:04:d3:7f:c5:13:4e:97:
9c:15:7f:26:ef:b0:5e:62:13:26:5c:ff:5e:8b:53:76:77:0b:
22:cf:43:db:c5:c4:ae:40:7f:43:9a:91:ce:e4:41:46:67:21:
a0:a3:bb:7a:b1:bc:01:67:14:0d:58:3b:7b:42:6a:40:46:c2:
0a:7d:59:12:7a:af:d9:9a:64:48:59:bf:bb:3a:14:0b:80:e6:
7f:51:c2:63:cb:78:e7:08:9c:aa:d2:06:72:e6:2f:43:52:8e:
8e:54:a1:d1:29:39:0a:b3:db:da:11:ba:5a:57:d6:b2:7d:1e:
ba:20:e2:df:23:b0:e6:fc:ec:ae:6f:55:82:6a:26:51:a2:2a:
19:12:7b:52:78:9e:4f:75:f4:35:8d:12:c5:76:1d:ea:bc:bd:
5b:6f:c8:76:5f:d3:42:87:5a:bb:a5:ed:6f:12:9c:1f:4c:c7:
ad:94:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:53:29 2025 by rpki-client