Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa
File: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (raw, json)
Hash identifier: NLpKCaNzwymqX+JUy4oTmpLmRdKhH96APzizVGdYs+o=
Subject key identifier: CE:01:18:F0:E0:DE:FE:BC:25:59:06:18:8D:B1:80:7A:7B:D1:9F:BB
Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial: 0312
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa
Signing time: Sat 04 May 2024 10:13:17 +0000
ROA not before: Sat 04 May 2024 10:13:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 149492
IP address blocks: 103.181.46.0/23 maxlen: 23
103.181.47.0/24 maxlen: 24
2001:df0:67c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Validity
Not Before: May 4 10:13:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66360a3d-c861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:d9:58:51:e1:f6:c1:c0:07:95:9d:30:5f:
41:b6:2f:6e:5d:28:c4:0c:fb:23:9a:fd:3d:36:c1:
2a:ab:79:ab:98:fd:cb:b0:24:4f:0a:32:c8:28:e2:
4d:97:b5:23:11:aa:6f:5e:bd:3d:f5:4b:37:b5:86:
fb:bf:dd:35:f4:65:67:18:c7:12:21:37:16:ae:47:
ca:d1:6f:20:ea:26:07:a4:28:58:f6:b4:59:dd:89:
22:a7:b7:6d:bf:1c:ab:35:24:02:2a:26:e0:ef:36:
fc:f5:89:8f:32:95:2f:62:ea:ba:e5:70:0b:d7:a8:
d7:a2:1c:7b:58:83:89:97:37:ab:2e:c8:6a:38:99:
92:e9:09:18:5a:7d:c2:9e:3b:81:12:1f:de:8d:fc:
6b:ac:56:5c:31:80:c8:f8:d0:49:b8:57:e1:9e:72:
73:76:13:a2:17:aa:03:8a:8a:2d:19:d1:d8:04:12:
14:33:5f:0f:81:c7:12:81:bb:45:fa:d8:4c:cb:ab:
37:a7:ec:31:4d:67:e6:b4:18:8c:5b:6b:18:83:c5:
3f:ae:15:b5:eb:45:2d:0b:b3:8c:24:e1:ca:98:d0:
b0:f1:22:09:a0:20:94:c3:56:20:e9:21:fe:4d:3b:
37:0d:60:b8:e1:eb:f6:13:0e:da:17:5e:7d:c5:a4:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:18:F0:E0:DE:FE:BC:25:59:06:18:8D:B1:80:7A:7B:D1:9F:BB
X509v3 Authority Key Identifier:
keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/ECCC589A09FE11EFBEBB616CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.46.0/23
IPv6:
2001:df0:67c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:0e:7c:d6:dd:8a:cd:aa:9b:f6:4e:67:85:0d:59:be:8a:53:
52:64:54:1d:64:fd:7d:0c:05:b3:62:33:d3:6d:49:fc:4c:5e:
5d:06:fa:ea:5e:c1:51:57:5a:54:2f:f1:25:73:48:a0:67:4a:
b3:98:85:5c:2a:fa:99:7d:8b:b1:94:e2:ab:b2:ee:fa:75:70:
d0:39:72:fe:dd:4f:71:10:d8:5e:6a:15:72:68:ef:80:f0:c3:
e4:58:00:9a:ab:e0:2c:3a:18:a3:d5:e1:98:7f:46:47:a8:69:
ec:0a:1b:ab:74:5c:a1:74:04:55:85:f7:11:da:f6:9b:9d:4c:
b2:8f:c9:6d:fb:1d:99:14:6b:3e:21:59:8a:cd:da:e5:85:c0:
06:fc:4b:c7:72:c3:81:1e:78:9c:ae:ab:52:61:3a:d4:3b:6d:
b9:a2:88:0a:6e:b8:db:58:e9:93:69:39:fc:2f:66:14:8d:a0:
7e:d4:9c:2b:5c:48:29:44:0b:a6:10:9d:19:e0:32:70:5a:1a:
57:b7:94:71:0e:7f:ae:95:5e:cf:ab:d5:4f:27:e9:28:44:80:
f9:b8:00:13:77:56:79:2f:71:fb:c4:4a:e7:49:2e:7c:f6:f4:
b1:e9:be:6c:33:fa:33:1d:fc:87:7d:2c:ab:61:b4:70:6c:3e:
32:60:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:44 2025 by rpki-client