Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa
File: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (raw, json)
Hash identifier: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE=
Subject key identifier: F8:35:AE:8E:5B:57:6C:6A:2A:A7:D3:3C:7A:F1:0E:9D:43:D6:62:8D
Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2
Certificate serial: CF
Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa
Signing time: Mon 15 Apr 2024 06:08:56 +0000
ROA not before: Mon 15 Apr 2024 06:08:56 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134703
IP address blocks: 103.107.242.0/24 maxlen: 24
103.107.243.0/24 maxlen: 24
2001:df2:1640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2
Validity
Not Before: Apr 15 06:08:56 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=661cc478-472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:05:f7:35:f3:c1:f1:26:11:52:f7:00:b5:
58:11:92:bc:e3:2c:49:8e:4f:a4:64:43:8a:86:8c:
a9:0a:4c:4b:29:ee:bd:cf:b5:aa:ef:58:64:35:d6:
c3:e3:00:77:34:04:74:c8:dc:dc:bc:df:c4:b0:00:
b7:74:77:c4:39:b8:c5:e3:c1:19:76:66:f5:ee:0f:
af:08:e1:60:0b:d4:73:ea:54:60:52:58:fd:80:4e:
63:e0:8f:31:b1:05:7d:ff:47:27:e7:a4:c3:41:40:
df:76:9d:63:53:dd:99:5c:9f:78:3c:21:c9:af:54:
14:5e:ed:4c:47:bb:9d:73:c8:ee:e5:49:e3:a2:c1:
ef:e6:d8:49:27:dd:eb:a2:38:7c:bb:d9:76:38:c3:
50:a9:12:7b:b5:02:0c:b5:58:8a:3e:b9:55:72:21:
7a:71:08:ad:c9:fe:44:26:f4:1c:ab:ce:5b:2e:06:
ee:ad:8e:7b:6e:48:32:ca:a3:ec:91:b3:66:ee:1c:
e2:ae:c5:ec:ba:fb:35:46:cb:73:e6:da:8d:fe:29:
54:40:da:63:5d:2a:bc:1b:ab:b0:5f:ac:6b:b4:b6:
00:77:3b:eb:2b:00:ce:07:8d:0c:11:03:85:54:46:
0d:2e:ef:fd:17:66:3f:23:07:9e:b9:6e:2a:12:d9:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:AE:8E:5B:57:6C:6A:2A:A7:D3:3C:7A:F1:0E:9D:43:D6:62:8D
X509v3 Authority Key Identifier:
keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/20BD79FAC17A11ED8F7A315FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.242.0/23
IPv6:
2001:df2:1640::/48
Signature Algorithm: sha256WithRSAEncryption
2b:8b:9d:f3:29:19:26:21:94:31:2d:54:e7:a7:60:3c:72:43:
57:ab:b8:a8:ac:83:46:06:46:ec:b3:30:fe:8f:3f:96:50:b1:
db:8d:cd:be:40:4a:48:ea:ff:ad:4e:3c:e4:c8:86:40:bf:d3:
3c:3b:88:07:ba:a9:d9:67:6f:15:d5:60:15:36:95:fe:69:18:
2b:79:9e:13:3c:6b:a0:84:58:5f:73:74:86:34:3f:81:e0:f8:
26:52:a7:17:c3:52:2e:ca:c3:06:47:c4:bd:df:21:09:35:bf:
d7:11:02:d7:6b:8e:b9:5e:b3:b9:1d:61:de:b7:11:c1:f2:00:
58:ba:56:8a:48:5f:f0:15:08:5b:73:36:fd:ed:e8:e7:b7:f3:
38:ae:74:41:cb:d5:59:0b:77:28:04:b2:3d:87:6a:73:b3:be:
b2:b5:9f:d9:3b:14:2e:5e:ee:a6:2e:cc:eb:9f:86:6f:58:9d:
e1:fa:89:c4:09:68:00:b7:d8:64:65:3e:d4:0c:e9:e3:93:04:
b1:72:93:bf:65:d7:fe:1b:20:69:eb:dd:7a:53:82:72:79:82:
58:16:1a:70:a5:b4:38:c7:0c:26:7b:8b:84:e0:37:8a:30:c3:
e0:7f:e6:71:96:8e:ab:9b:0c:29:57:bf:bb:17:73:4d:8a:c9:
ff:4f:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:13 2025 by rpki-client