Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
File: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (raw, json)
Hash identifier: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw=
Subject key identifier: A5:18:D4:9C:E9:95:13:80:BD:86:5D:85:98:F9:09:89:10:0B:30:08
Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial: 0D72
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
Signing time: Wed 02 Oct 2024 18:26:32 +0000
ROA not before: Wed 02 Oct 2024 18:26:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 396982
IP address blocks: 103.141.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Validity
Not Before: Oct 2 18:26:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fd9058-4ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:51:92:03:a9:fc:c9:6d:be:49:d0:c2:c1:
7c:0e:93:03:98:b6:b2:ea:47:02:79:42:42:07:06:
95:c6:f6:f6:f7:80:36:3c:fe:6a:44:c6:69:68:8e:
84:8a:c4:d0:21:2f:19:ed:2d:c1:41:10:14:d2:6c:
d8:1e:a2:80:25:7e:ac:9b:b5:ea:64:77:82:81:29:
64:57:17:83:7c:ba:cd:43:c8:fc:f1:e6:12:2e:eb:
a8:6b:85:2e:db:e1:fa:d0:fa:0a:92:6d:fb:5a:f4:
c7:ed:b3:ea:5b:74:e7:76:78:f0:b5:82:f5:7d:ec:
f2:e8:72:0f:ea:3b:61:07:e9:c4:d8:04:ed:7e:83:
0b:64:91:40:74:d6:40:07:72:32:67:a3:f5:fd:bc:
2e:99:04:bd:3c:2a:86:11:63:16:3c:82:7a:a5:75:
97:15:cd:d9:ae:ce:1a:23:ac:78:bc:c4:5d:6c:20:
74:31:2c:9c:9f:7b:08:a7:ef:bb:d6:73:ea:ca:f1:
07:c6:fc:70:e5:93:ef:5d:bc:66:d6:a1:b8:20:d9:
f8:18:94:bf:21:e4:0d:ef:60:0c:73:80:79:9f:19:
42:ef:dd:1d:d1:fe:1b:19:b2:a2:b8:3b:e5:92:64:
70:67:f1:d2:f1:31:fc:0e:14:74:de:f8:30:81:ca:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:18:D4:9C:E9:95:13:80:BD:86:5D:85:98:F9:09:89:10:0B:30:08
X509v3 Authority Key Identifier:
keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/9F14D15E70DB11ECACCABD21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.214.0/24
Signature Algorithm: sha256WithRSAEncryption
97:74:d2:9b:a5:37:8c:2e:a6:98:ac:1f:79:6a:bf:36:ef:95:
6b:85:b2:e8:4b:99:02:90:fe:5a:61:44:c6:08:5e:8a:eb:5d:
75:4b:c4:13:91:a1:cd:90:7c:02:de:5a:61:7d:09:ef:ff:c8:
50:ef:ac:31:b2:f6:27:8a:9f:c6:f4:df:b2:fd:f0:79:a0:09:
1c:3c:e6:d1:f9:08:71:5c:e2:72:19:78:0d:78:fe:ca:17:65:
af:41:69:1b:69:7b:0e:53:71:1c:91:bc:36:d5:97:86:f8:fa:
9f:b8:4a:7d:bb:89:c2:d0:7d:ac:c8:16:9e:b0:9b:cd:68:1b:
ff:c5:be:d5:0a:1e:ef:64:29:cc:03:96:98:07:51:b4:cb:c5:
df:9b:e5:37:02:e9:88:7b:7c:da:54:b2:c2:76:4f:4c:cc:d4:
04:ca:0e:14:af:b3:ac:39:90:d6:ff:97:61:6f:28:b7:5c:7c:
52:d4:fc:01:74:4d:40:2e:7d:91:58:bc:4f:13:23:8d:7b:e7:
58:64:10:ff:00:7e:62:f9:a8:dd:f3:0f:06:7a:9f:7a:32:16:
d1:49:93:b4:9c:9e:ae:6e:0a:5c:44:c6:3e:4c:60:5b:fe:8a:
f9:5a:91:6d:7f:4b:37:7e:2a:dc:e9:ee:52:83:c9:c2:5e:e8:
18:12:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:28 2025 by rpki-client