Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa
File: D39B04847C4B11EEB4EA3632C4F9AE02.roa (raw, json)
Hash identifier: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=
Subject key identifier: F9:11:B8:1A:30:CE:9B:5A:EE:B0:C8:6E:43:2C:E8:1E:48:D6:D8:EC
Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial: AC
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa
Signing time: Tue 03 Sep 2024 06:48:49 +0000
ROA not before: Tue 03 Sep 2024 06:48:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 56038
IP address blocks: 103.247.184.0/24 maxlen: 24
103.247.185.0/24 maxlen: 24
103.247.186.0/24 maxlen: 24
103.247.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Validity
Not Before: Sep 3 06:48:49 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6b151-95c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:ce:8d:ed:d1:f1:57:04:61:27:4c:e9:07:
29:0e:e3:ec:0c:5b:2e:f3:86:07:25:e9:be:2d:31:
84:b7:48:90:2f:ba:94:06:4b:ec:63:94:43:3a:7d:
b5:b4:de:c7:43:21:11:bb:63:33:9b:ef:b8:10:43:
95:c5:09:4d:f9:e1:12:c2:ee:b0:6d:7b:ef:06:dd:
b8:18:17:70:db:f1:a7:50:61:41:d1:12:27:cd:3d:
25:2a:69:f1:6d:fe:f8:cd:d3:ab:84:a9:23:57:30:
87:23:93:f1:a9:5d:8d:6f:ec:a8:67:df:98:ca:25:
c2:70:ee:8a:bc:20:79:f7:e0:9d:b6:7a:c8:82:fe:
75:fa:ec:df:b6:8a:cb:c7:70:1b:e8:08:f0:2b:88:
d5:3e:79:2d:2c:23:1d:76:c9:81:1f:45:4e:34:a8:
34:67:c2:bc:60:f9:d5:d6:15:0c:e4:8f:c5:58:62:
15:b7:13:7b:89:ac:66:66:20:3e:2f:a5:46:6a:79:
bb:88:8b:ca:66:4d:63:50:b0:de:f2:42:66:bf:ce:
23:f0:a5:36:26:30:eb:8a:93:6b:43:6e:7a:52:7e:
fd:8f:9a:5f:39:00:ac:23:db:ad:5c:d1:c0:c2:9d:
96:87:11:04:22:f5:e3:23:99:f6:fe:c3:06:4b:a0:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:B8:1A:30:CE:9B:5A:EE:B0:C8:6E:43:2C:E8:1E:48:D6:D8:EC
X509v3 Authority Key Identifier:
keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/D39B04847C4B11EEB4EA3632C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:c7:78:a7:6f:5c:3b:e0:8f:27:15:aa:2b:17:8a:b3:8f:77:
e8:da:82:6c:b9:0c:22:e2:0b:26:74:6c:b5:14:33:14:43:f7:
5e:e1:a9:1d:2d:d5:0d:78:e0:8d:d9:0d:e6:03:06:3e:bd:25:
1b:48:18:69:8f:9c:39:a7:5a:ab:ea:55:bc:a8:b6:2d:d3:e2:
1c:70:94:0f:8a:ae:dc:14:f4:bb:bb:4b:16:28:75:fd:9a:8b:
4e:5e:ba:04:c0:4a:93:99:2a:10:03:73:80:e4:70:95:4f:98:
72:ea:06:83:33:be:09:9e:59:aa:bd:8d:6c:64:ea:fb:b9:6b:
b3:02:47:a3:e6:dd:1d:85:53:cf:6f:49:4c:3d:54:d7:d0:39:
54:f4:fc:2e:40:f0:96:c1:cc:8b:9f:07:67:f5:f5:1e:70:80:
fb:06:81:6d:5a:67:7a:f1:f0:22:a5:ad:b1:c4:1a:f5:95:d3:
66:5a:62:83:6b:18:ab:fc:f9:b1:e8:9c:98:ef:30:37:c0:d7:
a1:43:47:36:27:9b:ba:a0:e8:8e:ac:28:63:c4:42:9e:7d:a0:
0c:76:2d:2a:66:7b:4e:3d:ce:45:62:f8:42:86:0f:39:51:b0:
81:66:d5:7f:9c:a1:8d:77:e9:21:10:b2:fa:b6:70:b6:a2:0e:
40:a8:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:48 2025 by rpki-client