Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa
File: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (raw, json)
Hash identifier: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw=
Subject key identifier: A6:9C:FC:DB:0B:55:6E:A7:C7:4D:CE:DF:53:39:0A:15:F2:D1:9D:36
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 07B2
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa
Signing time: Thu 24 Oct 2024 21:10:40 +0000
ROA not before: Thu 24 Oct 2024 21:10:40 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 45177
IP address blocks: 103.123.164.0/22 maxlen: 22
103.123.164.0/24 maxlen: 24
103.123.165.0/24 maxlen: 24
103.123.166.0/24 maxlen: 24
103.123.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Validity
Not Before: Oct 24 21:10:40 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671ab7cf-21c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:a1:c2:a6:6a:87:58:38:90:0a:79:6d:e8:
6d:41:9a:d3:fe:dc:39:dd:67:25:01:bb:66:4d:46:
87:79:b0:c8:9c:19:04:3d:30:3b:76:91:82:1b:01:
81:09:f1:2e:be:75:0c:68:13:d5:8f:9f:81:2b:16:
43:d1:e8:38:00:36:c5:1a:67:52:17:3b:6d:39:cd:
91:f8:b4:f8:42:d6:92:5b:7f:cd:e9:cf:ac:4c:96:
3d:54:d0:b1:c5:b0:50:b4:03:2b:b5:f4:33:de:57:
81:a4:45:49:b2:47:cf:e1:48:1c:a5:35:3c:f1:4e:
b1:31:37:e0:5c:4c:f3:c4:89:3f:bf:d4:0a:1d:f8:
8a:b6:9b:32:95:01:a5:03:97:18:75:89:12:43:5a:
df:6b:4c:bb:c4:a0:fc:e8:60:04:97:d1:5b:54:df:
4f:5f:4a:ed:81:a1:f5:26:95:c5:0d:de:48:27:21:
48:bc:fb:a0:15:12:ec:e4:45:e5:59:cb:18:fe:63:
d8:1a:f5:e2:6c:f0:99:67:af:68:8e:86:d3:a5:14:
fe:81:5a:ad:ab:4d:98:aa:f9:f6:d8:b7:ae:08:60:
bb:1f:f8:df:84:a1:17:a6:6c:31:b8:fe:61:43:d9:
ae:20:a1:38:15:79:e8:3e:39:27:f5:69:77:d5:9f:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:FC:DB:0B:55:6E:A7:C7:4D:CE:DF:53:39:0A:15:F2:D1:9D:36
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/4B3AC7DC5FC811ED869A6956C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:be:66:67:4c:37:68:1f:f8:8a:b1:21:0c:f7:dd:31:b1:7c:
2f:d2:27:dc:0c:52:ed:34:3c:f5:07:f2:a2:1e:e3:d2:56:88:
5d:9e:06:2b:af:dc:15:c9:37:65:ec:13:d7:08:52:c3:a9:3c:
24:31:1f:8c:fc:59:42:83:de:2d:01:69:31:9d:8a:9d:45:df:
80:b0:2e:c2:05:4c:86:9b:05:c5:3b:f3:a4:90:0b:19:d7:f0:
03:3c:20:08:63:ae:d3:7d:09:3f:c9:f7:20:d8:e6:f8:e9:51:
57:ba:8f:ef:ef:86:e2:2b:2a:ce:d5:79:5e:4c:5f:2c:48:8f:
81:97:80:9c:34:54:71:7a:6b:cd:7e:12:a2:d2:f7:03:c7:50:
74:d0:8e:fb:b8:b2:e7:7e:5f:92:cb:f8:e7:64:ac:80:bf:bc:
dd:19:21:f6:84:8f:60:34:d5:fe:a0:63:97:3a:ef:f6:01:4f:
0c:5a:fb:02:83:8a:43:0e:3e:08:4f:a7:da:8a:45:d1:28:6a:
aa:2f:96:82:35:ff:e5:2c:cc:ad:28:3b:12:66:3d:65:1d:fb:
61:5b:96:64:09:dd:6e:c2:c9:71:37:43:28:4d:7a:d2:9f:2f:
f1:62:c6:1f:80:9d:e7:2d:af:38:63:b8:6e:a2:cf:ed:96:ab:
49:b8:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:03 2025 by rpki-client