Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
File: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (raw, json)
Hash identifier: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=
Subject key identifier: A0:F7:AD:17:C6:7E:C2:59:58:CB:AC:76:A6:AC:E5:7E:03:CF:F9:FD
Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial: 0B44
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
Signing time: Wed 18 Sep 2024 19:08:30 +0000
ROA not before: Wed 18 Sep 2024 19:08:30 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139741
IP address blocks: 103.144.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Validity
Not Before: Sep 18 19:08:30 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eb252e-4b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:06:54:b5:dd:d0:69:52:31:01:b2:db:4d:
cd:45:6a:8f:9e:3f:d3:b3:37:3b:41:1f:34:57:47:
d6:e4:ff:08:92:bb:f1:ee:38:55:d1:e4:56:e3:80:
d9:c8:f4:b8:5a:52:a7:6b:bc:54:c1:c8:3d:51:a1:
76:42:bf:e0:9f:01:24:48:11:3e:78:99:13:d0:91:
7b:81:d4:01:a7:08:72:70:2b:26:1b:51:c4:14:9e:
4c:c9:9f:c9:0a:bf:25:c4:97:ae:8b:b9:04:f5:8b:
59:0f:0c:f6:b0:18:67:a5:79:e2:3e:7e:3f:6b:bf:
06:7f:d8:0e:07:e2:9c:7d:9f:d2:60:6a:0a:28:4d:
53:10:cd:4c:fb:ab:04:8b:4f:68:7c:3b:1e:52:c0:
73:4d:b2:02:b9:14:3f:bc:22:53:d3:64:ec:7f:ad:
42:c9:38:53:0e:a0:b0:e4:28:38:00:8f:42:ec:a2:
00:f1:82:b2:fe:8b:7b:16:ea:83:cf:09:41:cb:e0:
91:63:a8:f7:56:7c:c5:68:86:2f:f1:48:64:76:53:
2e:a0:ea:f3:b7:c5:37:5a:d7:2e:5d:79:5b:39:33:
58:35:2a:d4:54:37:0f:83:21:d1:38:f0:f9:49:75:
fa:9f:4f:d5:67:f7:b9:08:9c:08:ef:b0:c5:fa:3f:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:AD:17:C6:7E:C2:59:58:CB:AC:76:A6:AC:E5:7E:03:CF:F9:FD
X509v3 Authority Key Identifier:
keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/69683D8CC64D11EABD8FD32DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.106.0/23
Signature Algorithm: sha256WithRSAEncryption
09:d2:c5:4c:bd:95:40:6e:03:3c:c1:d6:7d:28:75:c8:83:02:
50:17:3c:1d:a4:03:65:d5:d1:7b:92:c7:fd:51:9c:ef:31:50:
09:e7:8e:6b:dd:0c:91:21:c8:d3:33:cf:80:ce:d6:62:d9:e0:
df:ff:43:2a:8d:ca:d8:9d:f9:d0:de:b5:01:b2:ac:f3:76:a6:
1a:ed:c5:ac:5f:17:1f:24:f6:16:b8:92:32:35:48:e4:e3:0a:
cd:1d:18:ff:fb:78:34:35:40:27:e2:f9:4b:6b:41:2d:57:4c:
44:7e:22:28:d0:f2:ac:54:fc:f1:3a:91:5b:46:08:10:92:7e:
02:56:61:53:9b:be:c8:b8:7a:ea:4a:35:a5:cf:e2:8f:db:04:
e8:4c:5b:db:66:d6:b5:79:20:9b:e3:85:4c:67:c8:27:10:e9:
db:3e:84:11:e8:94:92:96:9c:83:05:3f:8b:4b:fb:ad:17:fc:
d0:23:b6:75:76:9c:36:a2:47:49:f6:c5:84:54:39:e3:88:60:
5b:cb:e4:a5:69:73:27:55:f5:db:a0:32:e0:47:67:74:f9:7a:
f8:b5:85:7f:8b:0c:88:53:4b:fa:9f:b9:dc:81:04:88:32:e3:
e1:8a:dd:ef:7a:cc:27:c7:90:d1:e1:4f:1b:11:28:69:c1:5e:
fe:92:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:46 2025 by rpki-client