Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
File: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (raw, json)
Hash identifier: NLCu2j7NyVCfAMNadoeiUtb8mS5PqTykxmEmvgk0+vQ=
Subject key identifier: B0:D3:E9:BA:6B:BA:98:68:7D:97:88:00:DA:52:7B:55:57:92:FB:AD
Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial: C7
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
Signing time: Wed 03 Apr 2024 06:39:14 +0000
ROA not before: Wed 03 Apr 2024 06:39:14 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133370
IP address blocks: 103.225.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Validity
Not Before: Apr 3 06:39:14 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660cf991-b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:91:7a:6a:c9:74:38:83:a6:58:c2:35:27:
7a:b8:d0:20:8e:57:06:ec:3b:0a:57:47:92:20:25:
01:fc:0e:33:35:be:a4:8a:3d:d9:40:e9:eb:fa:0c:
0e:5d:c2:30:cb:4a:f0:79:a9:ee:5e:92:9b:8d:41:
64:a8:01:e0:83:74:56:8c:e6:04:81:6b:65:96:32:
dd:de:72:3f:f2:64:42:c7:45:96:42:83:ef:6a:fd:
bf:bc:5e:80:46:22:97:c8:22:80:99:e6:3d:18:ff:
e6:f1:f4:fd:6e:af:e0:08:93:bc:01:56:76:8e:48:
08:85:62:79:79:97:0e:69:e2:75:c4:38:e2:13:f1:
4d:54:cb:05:a9:93:3d:ac:38:1a:04:a6:9b:5a:d9:
4f:50:b0:56:dd:d4:9d:18:66:bc:6d:c0:60:04:95:
cd:2b:22:5d:f4:ec:ce:7f:82:d3:5f:97:1e:b4:2b:
b8:e4:0f:0b:8e:e3:b8:b3:f4:50:97:99:2a:d2:a9:
ae:78:22:2e:13:92:cb:59:54:01:85:fc:fc:0e:05:
84:09:ce:93:36:cf:4a:17:44:55:26:db:31:67:62:
0f:7d:e8:33:43:71:e7:ad:aa:c6:05:0f:48:d4:17:
57:4e:61:a0:d5:38:30:48:b3:45:54:a7:2c:a3:e4:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:E9:BA:6B:BA:98:68:7D:97:88:00:DA:52:7B:55:57:92:FB:AD
X509v3 Authority Key Identifier:
keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/A92EC53AC95B11ED9ABE6935C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.210.0/23
Signature Algorithm: sha256WithRSAEncryption
81:74:60:e7:6e:b1:e8:cf:15:a6:f9:58:0d:9e:3d:f7:64:ce:
0c:69:77:f3:61:f0:f0:28:c8:79:cd:98:dd:d1:87:90:4d:3e:
7d:a8:b8:bd:98:a2:d1:5b:73:30:be:bf:8a:5c:4b:a4:c2:08:
e8:80:e4:92:fb:85:8b:8a:81:33:d4:a1:a7:5d:9d:26:52:59:
eb:b5:b2:9f:e1:69:01:58:41:00:9f:9a:50:11:51:0d:46:4b:
26:e1:ce:b9:6d:ad:dd:1f:b2:6c:de:46:4c:e4:e3:3c:15:d2:
a3:39:7f:74:c0:5a:40:26:41:73:24:f2:24:fd:1d:fd:7e:f1:
8c:36:ed:de:0e:db:04:96:64:19:27:dc:75:ec:d5:92:8a:d1:
cf:18:2c:d0:1f:af:64:bd:ab:92:36:25:e0:6b:1b:6c:3b:c1:
b6:2c:50:98:8e:1e:46:41:93:65:f6:73:b5:0d:8b:5a:cb:4b:
fd:cd:b0:af:e9:e6:54:06:62:54:7f:bd:de:d9:b8:1d:08:4f:
9c:76:7d:8e:8b:0a:b7:2b:5e:34:3e:6b:65:34:99:54:a6:e4:
04:55:cc:05:8a:5f:37:5d:68:f2:c4:f7:5a:49:01:46:b9:82:
e9:67:7b:4a:17:46:94:af:95:09:8d:95:43:11:2e:50:6a:d9:
0e:58:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:00 2025 by rpki-client