Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
File: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (raw, json)
Hash identifier: INAvAHudzPZT0eOcOkMlBnMLdZykePd0YOhNH7KxTi4=
Subject key identifier: 3E:C2:E4:0E:07:8F:CB:7D:23:B8:34:DF:9E:32:01:33:F2:66:F6:0E
Certificate issuer: /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial: 06
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
Signing time: Thu 24 Oct 2024 11:28:38 +0000
ROA not before: Thu 24 Oct 2024 11:28:38 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9541
IP address blocks: 103.150.105.0/24 maxlen: 24
202.70.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Validity
Not Before: Oct 24 11:28:38 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671a2f66-ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:66:89:68:75:92:d0:56:33:b8:70:66:b0:
d5:3d:4b:40:67:10:d8:49:0d:9a:c2:24:e4:37:79:
e0:32:5b:0e:c2:28:28:92:ad:8f:6d:e9:2b:c7:11:
f7:4f:a4:79:bf:be:a0:77:4e:bb:46:ec:9b:9d:36:
d5:7c:bf:95:6d:9c:d0:9e:a5:36:47:a7:24:ac:e5:
7f:9c:82:a9:dc:50:76:de:fe:bf:db:9c:7c:1c:67:
f3:0d:bb:43:50:cf:57:e1:8b:d4:37:9f:b7:e9:db:
91:5d:d1:6e:87:ce:c4:49:42:70:18:f0:1a:96:c9:
d1:32:dc:10:e5:cd:ae:2d:4e:8c:41:26:0d:dd:ee:
4f:8d:52:0c:1a:b1:d4:f7:e1:9e:34:21:cc:b6:9a:
1b:68:20:1d:32:27:ce:ae:a9:67:50:21:5a:44:8b:
fd:fd:e2:7f:ed:3d:6c:2f:f5:8f:1a:be:19:7a:99:
ff:f0:6d:6f:3b:0f:0f:73:33:48:65:03:fc:a8:f1:
f5:22:aa:19:79:01:0d:91:d5:97:2a:2b:f8:11:a4:
4a:2f:e1:23:fd:ae:98:2a:ba:f7:e1:16:97:5b:cd:
18:7f:7b:65:a5:2f:fd:70:be:aa:fe:70:37:c5:94:
d9:71:1c:d3:ed:e7:40:30:7b:07:fa:54:de:0d:bb:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:E4:0E:07:8F:CB:7D:23:B8:34:DF:9E:32:01:33:F2:66:F6:0E
X509v3 Authority Key Identifier:
keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/FDC6BEA491FA11EFA4F0932CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.105.0/24
202.70.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f7:72:46:5e:35:0d:cb:67:93:1a:d6:2d:27:d5:34:df:83:
49:ac:ff:76:90:a8:29:c3:7c:dd:25:3b:fb:6e:24:df:8d:39:
3b:0e:11:6c:e1:f3:dc:b2:42:0a:bf:83:7a:8b:75:6b:f0:80:
83:a0:3a:2f:83:d5:38:49:8c:7a:66:07:33:83:cd:fd:ca:46:
d4:0a:73:6c:af:56:9c:27:03:76:d4:d0:ad:c5:fa:c7:d0:b0:
74:5f:6f:8b:14:71:03:d7:21:3e:2a:40:ba:8b:e0:49:07:c7:
ca:4c:8b:fe:ed:78:7a:38:e3:7e:0d:a5:c1:97:87:f8:c2:58:
7b:76:08:eb:e1:23:a3:8b:9e:f5:46:03:03:bb:ef:8f:c7:35:
39:a2:ad:3e:ac:49:b1:84:b8:b0:89:f4:2c:bd:a7:77:fd:61:
f1:81:dc:72:81:24:6c:93:9e:92:7d:73:fd:1c:91:56:d6:36:
a9:5d:4b:9f:b8:11:27:7c:20:1e:ac:67:1d:8c:cf:20:47:e8:
bc:4f:43:bb:b5:ab:86:f2:8e:91:e4:e4:7f:09:70:e9:7b:31:
e7:56:77:bf:98:d1:65:ea:56:cf:4b:35:e9:ca:93:35:1f:b0:
d7:d1:84:12:53:a4:94:dc:bc:bc:38:10:a6:b8:7e:52:08:de:
fd:c5:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:59:06 2025 by rpki-client