Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
File: F7EA272C043111EDB7DA7485C4F9AE02.roa (raw, json)
Hash identifier: mJhgsg3Wq2rzRuujkB6eG0zeP2qDmSZd91bZ6KNL7kw=
Subject key identifier: 0E:F7:D9:94:63:D3:F4:55:8F:7A:C1:69:75:05:B4:98:B3:61:8D:27
Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial: 02B6
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
Signing time: Fri 01 Mar 2024 03:35:26 +0000
ROA not before: Fri 01 Mar 2024 03:35:26 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 142403
IP address blocks: 103.146.50.0/24 maxlen: 24
103.146.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Validity
Not Before: Mar 1 03:35:26 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65e14cfd-7d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:9d:fd:98:6b:56:e2:1a:fc:c7:bb:bb:ac:
a3:3a:ce:5b:cd:7c:24:38:b7:a8:82:5f:a5:c9:2f:
89:b9:25:35:04:f2:2e:92:b7:c7:48:0f:8f:87:af:
ce:9f:d5:6c:fb:7b:2c:06:53:3a:de:8d:c0:24:1e:
86:54:f0:32:e3:db:65:b6:18:7e:d8:e9:ae:d7:23:
e1:2b:79:c4:2c:72:a1:9a:8b:d1:78:0d:b5:d8:37:
dd:5e:a6:94:08:d6:a6:84:80:73:57:16:2f:fa:98:
ce:c4:3a:96:66:12:30:eb:4e:97:79:9f:a5:3a:bb:
c7:4d:7b:72:8a:46:d9:60:f9:5d:cb:16:3e:ee:e0:
7f:28:69:9b:83:e0:75:9a:8f:ef:c8:f4:d3:94:aa:
ea:5e:f2:4f:35:ec:23:e1:fc:1c:d9:3f:39:02:b8:
31:7a:78:59:81:0b:69:df:3b:59:4c:2b:e7:4d:02:
78:f1:00:b6:12:cb:a3:6f:02:47:38:79:c0:f1:08:
57:17:21:38:4a:53:32:b4:26:83:75:6a:b5:19:cd:
98:fe:3f:58:e6:c3:cf:43:87:3f:38:da:8c:7c:d6:
cf:db:9d:6f:f9:7b:9d:06:f9:00:81:29:10:5e:f2:
79:23:92:3a:51:bd:22:1c:8e:f9:e4:2e:33:52:41:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:D9:94:63:D3:F4:55:8F:7A:C1:69:75:05:B4:98:B3:61:8D:27
X509v3 Authority Key Identifier:
keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:cd:06:04:68:ef:4c:b3:8c:ba:3d:1e:2a:d8:f9:fb:c7:18:
38:4f:96:c5:60:88:f3:15:5f:99:b0:28:fb:c6:7f:8f:dd:87:
ab:8f:a7:62:62:ad:a1:16:63:a4:77:03:4d:8f:60:31:9c:84:
7f:bd:52:ed:df:38:bd:33:a6:5f:eb:40:7e:d9:3b:1e:7e:33:
0e:97:4f:60:11:77:58:13:bd:28:aa:b2:22:c3:5a:9c:86:9a:
84:31:73:f6:72:63:ba:52:7b:ac:a9:e5:3c:1c:b0:68:e8:f2:
b2:c7:08:41:aa:11:39:03:73:77:7c:eb:e1:68:4d:ee:e3:ae:
7f:19:0a:6d:d0:a7:c5:be:de:12:ff:05:ec:31:28:ac:e5:e6:
74:06:80:25:2c:2e:5b:ac:46:eb:c9:44:1a:dc:9d:ff:4a:41:
ce:a3:a4:93:48:9e:61:8c:de:20:6b:a9:1c:69:cd:31:7c:de:
bc:65:29:ac:ae:54:b1:1e:10:2e:0d:ac:f6:21:25:f1:72:00:
80:ba:ef:e2:09:eb:69:5f:e0:00:a6:c4:75:4f:1d:de:48:00:
f3:c4:36:2a:0d:53:e9:56:44:f2:2a:1c:3f:87:71:fb:89:2d:
88:ad:fd:cb:81:ae:ca:92:6b:16:cb:cc:fc:1f:f3:3e:22:de:
8c:7b:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:39 2025 by rpki-client