Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
File: 5694D344791B11EEA64C016BC4F9AE02.roa (raw, json)
Hash identifier: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=
Subject key identifier: 7D:97:46:92:63:17:2C:33:72:CD:F3:AB:AA:81:DF:9D:02:45:D5:F8
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: AB
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
Signing time: Tue 03 Sep 2024 06:48:49 +0000
ROA not before: Tue 03 Sep 2024 06:48:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 133050
IP address blocks: 103.247.184.0/24 maxlen: 24
103.247.185.0/24 maxlen: 24
103.247.186.0/24 maxlen: 24
103.247.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Sep 3 06:48:49 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6b150-ff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:12:d7:fb:c3:53:47:12:b3:46:d4:75:7d:
e3:e2:d2:1f:91:93:aa:ee:76:34:27:73:0c:26:5a:
3b:75:ca:f4:63:ba:37:15:82:d8:e5:31:60:3f:78:
8d:61:94:01:8d:be:14:ae:6d:7c:18:6c:85:29:5f:
3e:6b:d6:15:71:c4:ed:db:76:26:03:71:13:1a:a9:
f8:d9:f5:c0:9f:44:7b:0d:2b:94:de:11:4d:03:38:
87:63:a0:be:5e:9e:06:0e:00:5e:f7:b0:f9:84:1e:
d1:c7:f8:96:d3:7e:ee:e1:22:5f:b0:42:1f:81:19:
27:e7:23:3d:1b:73:14:bc:58:ae:27:6a:16:e6:07:
6c:f1:50:df:0a:72:8c:87:4f:fc:a3:c1:2a:c7:3b:
df:4a:8a:32:f3:96:9a:bd:0b:5d:cc:6a:45:3d:6c:
d9:b5:6f:97:70:0c:18:57:82:11:ca:18:00:72:5b:
33:f1:12:e4:ce:2a:17:98:0c:41:a9:c8:f9:38:59:
16:55:56:70:21:7c:eb:8f:eb:cc:98:ab:63:7f:a3:
90:26:72:89:b8:9d:e5:7e:6f:53:c6:6a:14:82:43:
f6:71:cd:d4:d0:54:80:03:85:2c:55:fe:6f:92:dc:
fa:18:dd:a4:17:7c:a3:de:40:7a:1f:3b:99:99:bb:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:46:92:63:17:2C:33:72:CD:F3:AB:AA:81:DF:9D:02:45:D5:F8
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/5694D344791B11EEA64C016BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:5e:6e:33:99:3c:e5:2b:c9:d7:64:be:e2:5b:a4:41:7e:13:
a5:7d:e8:26:cf:34:fc:bf:18:01:8a:95:aa:06:57:92:69:82:
c9:6d:d5:22:3e:f2:2f:4b:85:85:99:c7:66:94:98:5c:35:2a:
fb:1c:70:8b:1a:d7:31:c5:de:13:4f:97:3f:e0:16:f6:75:cc:
5e:30:ea:17:2e:49:0e:17:8e:90:05:95:45:ed:6c:f3:63:07:
2d:79:6e:26:e6:5b:3a:e6:c7:34:dc:09:55:89:ba:5f:11:3a:
bc:b9:ee:a4:47:71:4c:01:ff:1a:51:4d:95:bf:ac:e8:e5:b5:
20:12:e0:eb:e5:56:f1:b6:8c:c3:60:31:dc:72:dc:4f:bb:86:
2b:99:70:a5:24:83:63:6c:51:eb:51:22:0e:75:32:38:62:ef:
14:c1:34:51:11:23:9c:70:5b:9a:7e:db:81:96:c1:8e:b0:b2:
a3:d9:13:1e:71:28:60:0d:06:ba:ba:66:20:5b:db:91:ff:40:
15:cb:f2:50:f7:31:76:e7:6f:db:84:cb:58:2e:53:8e:0a:e8:
50:72:c8:ab:b6:5e:08:52:88:ac:ee:20:eb:6e:a4:46:96:66:
4d:8c:8f:23:d6:43:d3:95:a2:c1:a6:0f:e1:a7:34:61:c9:0c:
f4:fa:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:12 2025 by rpki-client