Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
File: F80BF07C107B11ED9B3C5410C4F9AE02.roa (raw, json)
Hash identifier: btdqLhAPDRMz6WI33tnEvNcscLygEeQNr9pA6TuXIcQ=
Subject key identifier: 5D:81:8D:CA:43:A6:6B:30:D7:43:9F:F8:18:E2:ED:61:30:0A:35:5F
Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial: 0191
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
Signing time: Tue 05 Mar 2024 04:25:57 +0000
ROA not before: Tue 05 Mar 2024 04:25:57 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133929
IP address blocks: 103.165.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Validity
Not Before: Mar 5 04:25:57 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e69ed5-d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:2e:96:42:5b:60:03:25:a6:11:c4:36:87:
b8:af:93:89:22:b0:71:af:73:d1:8b:b1:b4:20:c4:
e7:77:67:9a:5f:75:12:cb:b9:d2:90:e3:b0:92:ff:
86:ce:fb:11:ac:99:1b:a1:f8:10:9b:1f:4f:2d:89:
a4:38:29:9f:2b:ed:c6:f5:c5:4b:f5:e0:83:5a:fe:
fb:3e:f8:c2:d5:d2:4a:e7:b6:14:6d:0e:94:d9:92:
e1:4a:2b:52:69:e4:d4:fb:ea:9e:35:54:4b:04:98:
6a:da:5b:c3:91:d4:fa:5e:b5:8d:e9:5c:70:bf:6f:
fe:ad:11:43:92:00:40:f1:eb:68:49:e2:8e:3c:03:
ff:23:28:f6:d7:ac:1c:be:36:e3:e9:80:a4:d3:42:
af:3d:76:ca:4e:7e:9e:34:eb:06:6f:f1:68:3d:6b:
33:54:2c:39:10:f2:2b:ed:d2:17:e7:5f:6a:a8:45:
8c:1c:0f:ca:02:1e:63:69:9d:e5:4c:57:ca:a7:33:
df:75:a9:86:e3:7c:83:bd:a4:65:f7:d6:4e:4b:1e:
c2:ee:a9:12:bb:3f:91:35:5a:17:5d:15:d1:0f:31:
d6:85:da:b3:8f:e5:e1:bb:5f:fa:a9:0d:50:36:e4:
47:34:26:67:26:54:e1:50:a2:df:86:74:fc:cc:85:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:8D:CA:43:A6:6B:30:D7:43:9F:F8:18:E2:ED:61:30:0A:35:5F
X509v3 Authority Key Identifier:
keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/F80BF07C107B11ED9B3C5410C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.17.0/24
Signature Algorithm: sha256WithRSAEncryption
07:02:44:04:11:db:c3:b8:67:d0:b8:94:c4:86:3d:71:63:0a:
41:2c:4e:d4:3b:21:32:fb:3c:1f:7b:6e:45:c4:65:62:09:59:
ec:9e:08:9c:f6:51:c4:2e:b8:79:66:cc:4d:bc:28:15:10:52:
c2:2d:76:43:56:b9:63:50:f3:be:54:13:dd:9c:4d:a2:e2:37:
e0:91:e1:5c:c4:8b:f6:eb:a1:1b:1e:ad:4b:22:93:55:27:be:
d3:ee:ab:9e:d7:70:97:5f:ee:96:2a:81:30:7f:92:6b:0f:cf:
20:0d:dd:26:61:25:b8:8c:c3:50:57:6e:b0:49:d7:66:09:5f:
7c:2b:55:61:bd:a3:02:cf:f0:e7:d6:cf:bd:52:ff:4b:31:0b:
a6:62:34:c9:3f:41:25:ea:a3:05:7a:dc:99:91:79:11:30:02:
82:9f:9b:fd:56:6c:48:99:38:69:72:34:22:02:69:17:7d:fa:
64:72:b0:aa:23:2b:dd:fd:59:65:d6:ba:32:80:11:9e:77:10:
1f:28:d8:d1:a0:5a:42:78:9c:4d:d2:03:44:39:e7:ae:5e:1a:
1d:e3:02:0e:73:07:6d:e5:59:ab:7c:85:05:80:2a:60:5c:ef:
39:df:dd:1b:e4:c1:fb:9c:fc:8e:f6:7d:ca:7a:2e:e8:28:3a:
15:67:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:54 2025 by rpki-client