Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
File: 6AA5FC16905211EE840DED1DC4F9AE02.roa (raw, json)
Hash identifier: MC0BNQ8WSdb9k6lw5PW7hJBMQ3Zo5Nq5ihUjlKmX1lo=
Subject key identifier: BD:70:F4:33:87:E6:CC:33:F7:E4:67:28:B0:83:73:CD:8D:16:C6:45
Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial: 010F
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
Signing time: Fri 05 Jul 2024 05:06:24 +0000
ROA not before: Fri 05 Jul 2024 05:06:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149838
IP address blocks: 103.187.190.0/23 maxlen: 23
103.187.190.0/24 maxlen: 24
103.187.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Validity
Not Before: Jul 5 05:06:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66877f50-9091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:0c:d1:06:b5:7d:29:93:2d:50:0e:4e:c6:
2a:cb:4e:47:0b:93:b9:c4:74:43:57:76:83:12:e4:
12:7c:e1:5a:6a:56:db:3e:63:ac:68:df:30:3c:4d:
a1:32:a9:7d:eb:c5:d1:fe:df:d5:ee:75:e6:c4:b0:
99:1c:33:57:3d:95:75:92:62:07:16:dc:91:8e:5e:
ca:ff:51:ab:3d:e2:9b:68:04:a1:52:39:56:03:04:
81:3b:f7:ea:45:ee:f8:47:69:6a:87:0e:89:65:68:
cd:0f:39:a5:f3:39:29:8e:59:cd:f7:bc:ce:23:c6:
7f:40:6b:69:30:00:6b:d1:34:b7:a7:74:e2:31:a1:
b5:cd:0b:83:9d:24:66:aa:d0:60:78:e1:d7:57:ef:
cc:0c:48:42:cb:fe:f8:17:94:48:c5:3a:f0:50:38:
d3:b5:c9:33:b7:32:c5:7e:d0:98:49:15:4b:ce:56:
e5:6c:d1:c4:9a:c6:6c:bb:b0:ae:a6:d2:c3:59:e6:
e2:fe:74:19:fd:e0:3c:1a:df:72:12:38:e0:db:83:
bb:84:33:90:4f:18:e8:8f:90:1f:52:7a:73:e4:14:
62:b9:64:6e:04:66:f3:a1:29:c1:7c:20:c3:13:c4:
e0:7d:5c:7d:da:95:51:21:b0:44:00:11:30:d8:72:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:F4:33:87:E6:CC:33:F7:E4:67:28:B0:83:73:CD:8D:16:C6:45
X509v3 Authority Key Identifier:
keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/6AA5FC16905211EE840DED1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:c4:71:99:cd:cd:19:e2:0d:9d:30:da:74:71:f9:aa:9f:04:
8a:0e:3d:00:9b:1e:34:6a:91:e9:c6:ea:a9:aa:70:d7:e1:60:
54:df:6f:fd:61:a1:65:6d:95:93:53:f3:78:42:c3:dc:7b:30:
48:c2:bf:ff:c8:95:af:76:01:1f:29:2c:b8:0e:0b:93:c7:93:
b9:5e:f3:c3:80:c1:bc:99:c0:ba:23:82:8a:68:b7:d4:d3:84:
ee:8d:75:c1:9c:85:9c:f0:75:56:b5:dd:4b:d2:e0:61:43:e2:
64:93:bc:1d:92:98:c8:a0:77:3b:c1:b6:ca:e8:6e:6a:0f:bd:
dc:eb:55:4b:cf:0e:30:b9:d2:7d:ad:6b:9f:2e:50:5b:a0:dc:
a1:4c:d6:c3:18:e3:ce:d3:7d:4c:6e:80:1d:ef:70:90:c1:b1:
ed:09:c3:c8:4a:da:73:f4:24:f5:fc:ce:ed:99:b1:2c:1d:1b:
ff:c9:35:d4:47:cc:a5:52:36:0f:39:ea:69:30:5a:de:e4:38:
d7:79:15:65:d3:cf:ba:af:c0:2b:55:e8:72:ef:a6:1f:cb:60:
d9:38:2e:12:7a:4c:00:34:0e:3d:93:c3:ec:36:f7:d3:25:d2:
c5:30:47:b3:a5:a2:d6:c4:ad:1a:62:70:8a:51:49:ef:df:77:
eb:69:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:59 2025 by rpki-client