Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
File: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (raw, json)
Hash identifier: 88rHQVPR1JUl3cf/OTRoNqatod6IR47YQyVPqlvmZBA=
Subject key identifier: 6D:32:4A:3E:AE:B7:85:AD:52:1D:F6:FF:1D:C8:FC:F0:68:71:D6:23
Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Certificate serial: 0CF4
Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
Signing time: Fri 28 Jun 2024 18:39:46 +0000
ROA not before: Fri 28 Jun 2024 18:39:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 139089
IP address blocks: 103.139.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A
Validity
Not Before: Jun 28 18:39:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667f0372-0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:9c:58:be:69:d8:bb:8c:49:b2:5e:13:23:
74:f3:08:9b:ad:a5:8d:d8:80:12:4b:16:c7:55:91:
89:7a:2d:bd:ef:eb:9b:23:0f:a4:3f:1b:58:10:17:
60:05:5e:dd:00:00:90:dd:de:f5:a7:55:23:69:4d:
43:41:a4:ca:d8:a4:22:0f:96:b8:22:b8:db:4c:ae:
19:ae:79:fb:93:6c:d2:d1:e7:05:a6:fe:2a:84:56:
1a:4d:a9:20:f6:d1:0e:0f:d8:ed:cc:05:95:24:c1:
74:30:22:e2:a0:9e:71:a8:53:c9:12:25:ab:5c:67:
7f:5e:47:bc:df:48:b6:20:08:7c:7f:85:3f:22:16:
a2:40:7c:1c:40:f3:a9:f4:d6:f0:69:27:78:1d:fe:
72:8b:0e:c3:1c:a7:f0:ef:0d:95:56:b5:cb:ab:6f:
72:4b:e5:16:70:f1:83:e1:07:c2:0a:6d:d6:47:40:
e6:a7:0a:44:b2:b4:e1:20:65:22:76:02:f4:62:d6:
74:00:1f:06:73:94:16:1b:ca:45:7a:05:c9:f7:4c:
be:d1:8f:9b:10:51:b6:c9:91:c8:b7:84:55:ba:ee:
dd:3d:27:83:12:5f:7a:0f:fd:77:65:7e:84:f5:f4:
85:81:bc:28:1f:0f:0b:b7:97:3f:92:98:e9:e8:5f:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:4A:3E:AE:B7:85:AD:52:1D:F6:FF:1D:C8:FC:F0:68:71:D6:23
X509v3 Authority Key Identifier:
keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.146.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:c4:2e:c9:e1:aa:7d:1d:4e:0a:7c:5d:df:60:2e:1b:ca:c7:
50:76:8e:34:1e:59:e3:9c:a9:8b:40:6c:fa:a8:23:54:1e:a2:
6f:b8:db:23:65:16:ff:18:27:f1:ad:d5:12:5d:f3:7c:44:43:
ae:f8:20:f0:6c:ad:5c:9b:38:87:18:77:5b:20:f8:cc:04:b1:
10:f4:12:e0:a5:e8:b3:e7:8e:e6:79:82:02:e0:b1:f9:12:b9:
d9:f8:ee:3d:30:cb:52:32:1d:75:93:53:10:c6:37:21:1e:16:
b4:cf:5b:dc:2a:77:32:8f:a0:f4:41:d1:2c:e3:bf:18:2f:54:
fb:02:07:77:21:66:24:3c:ad:01:de:d3:ee:87:d4:96:7a:36:
e4:3e:72:bf:2b:59:24:fa:36:3d:28:cb:e0:ba:4c:9f:33:52:
e1:45:50:a3:40:e7:7d:b6:37:6f:b2:43:7b:f6:2e:ea:fd:55:
11:e4:70:35:db:bf:48:f6:98:fd:d1:53:22:72:c7:74:26:71:
26:ab:78:ff:fd:d7:a7:44:77:79:48:79:f5:cf:ea:30:ad:8c:
d0:cf:05:f4:98:31:ef:aa:25:e7:6b:68:43:e1:e3:88:0f:54:
8c:28:03:8d:2f:c0:d6:a9:83:31:9c:87:a2:9d:51:71:88:70:
f3:4c:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:42 2025 by rpki-client