Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
File: F67928B2607211EFADFDA31CC4F9AE02.roa (raw, json)
Hash identifier: GgjTm2foJy13YqAGAhvufjFQnhTuEPbAqgibT/4+/5c=
Subject key identifier: 2D:AB:E5:F4:46:61:76:C8:CF:44:2D:95:9E:F7:59:46:1A:DA:19:EE
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 133B
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
Signing time: Thu 22 Aug 2024 10:40:35 +0000
ROA not before: Thu 22 Aug 2024 10:40:35 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 214766
IP address blocks: 103.78.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4923 (0x133b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: Aug 22 10:40:35 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66c715a3-259d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:7e:7f:ab:a9:fe:b8:d2:9e:aa:ba:a1:85:
e7:c3:fd:e1:46:2a:4c:f9:b3:03:22:45:0e:b7:17:
68:2d:46:5b:46:c1:4a:1b:77:f1:12:d0:f1:1f:70:
fc:2b:cb:cc:cb:c1:5d:f1:c8:46:cf:f0:54:f1:68:
85:c7:79:78:80:b5:37:77:3e:2d:31:0b:95:85:5f:
6a:98:a2:a5:6d:29:66:84:cf:5e:ec:46:dc:aa:45:
85:16:95:71:4b:f6:0a:ea:a6:76:f0:3e:33:24:2b:
bc:4e:fb:23:71:9c:a9:06:3a:cf:1d:83:db:a2:fd:
cd:5d:1a:5f:72:9b:f5:96:da:d8:9f:d0:c0:9c:b6:
e7:c0:c1:6a:96:13:94:86:68:06:cb:7d:65:4d:38:
f7:eb:58:7f:47:c5:76:75:b0:0a:e5:c3:55:cd:20:
31:52:44:8c:d1:21:27:f9:0b:29:2b:9f:da:23:42:
1f:92:45:9e:af:87:d5:a4:9d:22:de:79:55:eb:09:
10:f9:c8:a5:66:e9:2d:dc:76:54:a2:63:43:19:8a:
a2:1d:a7:8b:26:a6:95:61:f0:4e:ae:35:51:d5:8c:
fc:31:a5:c8:c5:7c:bc:fb:1b:a0:75:5f:13:6f:5e:
42:bd:d3:f7:9f:26:cf:7b:c1:62:30:aa:79:a3:97:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:E5:F4:46:61:76:C8:CF:44:2D:95:9E:F7:59:46:1A:DA:19:EE
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F67928B2607211EFADFDA31CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.243.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:17:84:38:fe:c6:0b:85:9a:d0:14:d5:30:2c:49:46:0a:4b:
f0:85:44:3d:bb:cb:91:71:7a:be:8b:03:7b:5d:78:23:88:30:
c8:e1:ed:d7:d4:39:7a:04:41:2e:79:28:65:3a:a0:68:a9:f9:
54:50:60:b3:8f:41:ea:4c:78:5e:c9:aa:b2:c9:ea:a1:97:9e:
68:25:30:0a:0b:68:24:f6:3c:d7:d3:07:2b:f1:5f:be:d2:f7:
e2:91:77:26:e6:1b:6c:56:43:6a:87:85:dd:f7:c1:21:24:ca:
20:f3:87:78:70:61:b2:98:c0:a4:11:e4:ec:67:cd:68:2a:98:
53:d3:29:bc:13:22:70:61:da:b6:fe:ad:0b:ba:4d:5a:f3:8f:
64:7e:13:f3:a6:db:54:6a:18:af:69:ca:89:4c:0b:0a:54:11:
15:5e:ae:c1:04:0f:33:c7:25:33:9c:f2:94:8c:04:c5:ae:60:
d5:ea:1a:7e:b6:46:a5:55:c1:c0:d2:0f:91:f7:64:2c:71:1d:
36:d6:dc:99:4b:3a:8e:92:cb:20:18:03:a3:c9:6c:16:13:78:
09:84:ce:04:b1:86:84:36:2b:7a:c0:03:47:89:01:db:07:c5:
c9:e6:23:2b:69:61:d3:45:19:0f:bd:06:87:d4:bb:85:31:be:
74:21:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:08 2025 by rpki-client