Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
File: 67CDF190321211EEA6FE6D43C4F9AE02.roa (raw, json)
Hash identifier: vFUGfYTbO0hXtZL5WrXZO6Ff20WnBskmHAy+Zz+UlEY=
Subject key identifier: 8B:52:23:65:C9:F1:4B:3D:72:DE:CF:17:61:78:BE:7D:89:2B:ED:92
Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial: EA
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
Signing time: Wed 09 Oct 2024 04:18:34 +0000
ROA not before: Wed 09 Oct 2024 04:18:34 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 6939
IP address blocks: 103.100.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Validity
Not Before: Oct 9 04:18:34 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6706041a-d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:ce:e5:e2:47:5c:de:b5:d2:40:47:cb:05:
c5:a6:0d:79:71:d6:29:ee:d8:af:4d:0c:62:8e:9f:
18:89:0d:84:16:cb:a9:9f:fe:3c:22:41:e8:f9:c3:
48:4e:f0:ba:22:85:ff:52:1c:39:18:8d:65:96:e7:
da:f3:5a:54:13:04:42:e5:c3:71:bb:3e:3f:5b:a8:
e6:1c:33:a4:4b:41:7a:07:a1:01:13:13:f9:08:50:
e1:66:77:f3:2b:14:d2:f9:f5:42:44:a0:62:64:cb:
5a:7e:47:e2:92:8b:f2:ef:56:06:99:e7:e0:89:35:
ea:ab:a0:8f:e9:f4:24:2d:1b:c3:2f:f9:e9:01:d6:
36:6e:72:fc:ea:ed:46:5a:53:bb:1d:3d:07:65:36:
71:31:8d:a1:42:e3:b0:eb:21:99:5b:d9:e8:af:ed:
a6:3b:e9:3b:20:36:14:1e:db:2b:07:1d:e1:ae:8c:
45:d5:ab:b2:1f:e8:72:58:20:de:40:02:91:a0:ca:
5f:71:12:43:56:30:e0:2a:0b:f5:ca:1a:96:d1:5a:
b2:ba:d7:6c:a6:85:d3:42:55:38:15:46:3b:4b:cb:
55:d3:66:24:dc:8c:bc:1f:e6:26:15:d0:68:03:7f:
9d:82:57:55:3c:cc:b3:cb:82:3a:51:58:c6:fc:51:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:23:65:C9:F1:4B:3D:72:DE:CF:17:61:78:BE:7D:89:2B:ED:92
X509v3 Authority Key Identifier:
keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/67CDF190321211EEA6FE6D43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.138.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a8:b1:57:f9:41:ae:e2:02:97:1e:f6:c6:3d:bc:4d:04:8b:
15:9c:bc:ab:8b:b6:d6:26:75:5d:38:af:66:c5:4e:6b:2d:e8:
df:af:b6:df:6f:a6:cc:2f:78:56:d8:81:4a:26:2b:4e:d8:da:
e3:13:90:aa:a0:98:a7:34:b4:0d:de:94:b1:8a:b0:39:94:7f:
8c:21:98:91:d3:05:f9:ea:09:76:da:a8:e0:80:b0:06:dc:80:
2b:e5:01:fe:d5:d8:58:94:d9:9b:dc:58:14:bf:34:01:6f:72:
f2:66:c8:6c:3f:46:05:41:f0:56:f6:7f:de:f7:bd:42:1f:02:
ae:df:a4:68:0f:4e:fb:b4:18:4e:c7:c1:85:cd:1a:b5:8f:44:
2f:e0:25:c1:71:c3:2f:73:a1:b3:6b:7d:7d:89:b7:50:87:0e:
f8:ad:2b:8b:81:7a:ae:d0:57:d8:44:c6:9c:e0:37:00:81:5d:
48:72:b8:5c:b5:50:96:51:7f:e5:37:1a:f9:49:26:9d:79:17:
7c:c8:22:c1:0f:e1:f7:e5:59:89:ab:f9:e7:3d:39:12:b8:32:
8d:67:4e:70:9c:b6:40:38:b0:10:bd:39:35:25:56:3f:6b:cb:
50:19:00:fe:a8:0f:4d:43:a4:6b:e2:18:e1:52:6e:c3:0f:f3:
5a:39:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:03 2025 by rpki-client