Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
File: C310EE5AACD311ED84BAA06EC4F9AE02.roa (raw, json)
Hash identifier: NPYNnjaBYs2qmRUfu8/y0KOBedXU4EghxnWja8r1cbI=
Subject key identifier: 55:BB:FF:CE:BA:CD:E6:9B:1B:60:5B:54:38:1A:6A:60:3A:D7:12:65
Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial: 0128
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
Signing time: Tue 03 Sep 2024 02:45:55 +0000
ROA not before: Tue 03 Sep 2024 02:45:55 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 136744
IP address blocks: 103.141.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Validity
Not Before: Sep 3 02:45:55 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d67863-282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:a5:2f:2d:49:20:bf:0f:e6:a0:40:ae:71:
b4:b0:c8:49:ae:29:66:bf:f5:01:7d:c2:d2:72:ea:
d1:f1:e7:07:e8:51:2f:11:62:42:bf:76:a5:6a:d3:
47:f1:86:cb:b7:09:a9:30:0e:94:a5:41:05:5b:e0:
ab:23:b7:69:75:6a:dc:28:c6:f4:76:f4:11:51:d3:
32:82:5b:0b:b3:a8:8c:18:ef:d7:e3:7c:b5:21:80:
d8:4c:56:47:c1:9f:97:60:2d:9d:74:a5:82:95:3e:
75:a2:5a:c0:d2:9f:fa:95:7a:5a:71:dc:d7:3d:2a:
6e:b6:77:58:ab:71:15:22:e7:88:d2:92:2f:7b:33:
d0:ce:7f:23:98:3f:d2:dc:d0:af:bd:80:79:3f:28:
ed:38:b2:d0:db:83:33:bb:19:23:f8:e3:fa:5e:4c:
a5:55:8e:52:47:b7:01:61:25:42:50:6e:93:6e:7e:
7b:8a:e1:ed:b8:c4:bb:24:d6:cd:3a:40:2d:63:6a:
9a:7b:37:47:35:62:ea:ba:bb:8b:7f:07:9b:46:79:
ef:54:a5:e3:e9:30:39:1f:49:1b:13:07:88:b1:1f:
99:67:6c:39:f0:b3:31:6e:a6:d5:63:c7:71:d8:36:
d4:ff:73:d4:54:24:7a:72:73:11:bb:f1:16:ed:42:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:FF:CE:BA:CD:E6:9B:1B:60:5B:54:38:1A:6A:60:3A:D7:12:65
X509v3 Authority Key Identifier:
keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:18:0c:37:62:a8:36:9b:6c:54:ab:9c:d2:3e:12:15:d1:d2:
ca:4d:26:fb:2d:f9:c2:44:81:46:75:4d:1d:9e:09:90:ba:ed:
a8:7b:da:37:f8:2a:8e:be:98:b1:81:81:fb:f7:f1:dd:ee:66:
a6:b2:06:6e:f6:f6:54:54:17:08:14:2e:fa:ad:56:b0:82:fa:
d0:a8:af:a8:66:a2:51:02:d4:c6:bf:66:cd:93:ec:63:7a:c6:
9a:a9:dd:0a:d2:08:db:84:ca:a9:0c:f3:9c:d4:c3:a0:a9:88:
86:f9:80:12:40:e3:74:ea:ca:f3:36:9f:9e:d9:56:d2:99:80:
36:89:27:70:94:2e:48:a5:7f:c4:55:c7:35:70:b6:06:86:74:
c9:e8:9d:93:74:5f:e5:74:57:d5:f5:3a:7d:62:e3:49:9d:2f:
08:4d:99:de:b4:a9:06:05:7d:27:0a:7f:6e:8c:31:51:0e:04:
f4:5d:d0:05:6d:d8:82:a2:65:6c:3e:0f:ec:6f:1f:3d:69:ca:
14:3a:54:54:22:38:4b:23:79:00:eb:19:74:d5:e6:a0:b8:31:
16:c9:fc:c1:da:83:15:09:eb:14:5b:c6:1f:a0:6a:7e:55:8a:
e7:76:ab:03:6c:ea:10:c1:03:99:2f:ed:41:77:7a:79:13:66:
ef:f5:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:58 2025 by rpki-client