Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
File: 44CF316C29DA11EEAC070054C4F9AE02.roa (raw, json)
Hash identifier: hTk/lRLlQBviCYjhXy1epTHYshfben0qR2IckEw1iPY=
Subject key identifier: A5:26:AD:12:E2:44:94:4C:F5:3A:43:72:DB:1B:7A:CD:19:7A:45:DF
Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial: 79
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
Signing time: Thu 21 Dec 2023 06:18:18 +0000
ROA not before: Thu 21 Dec 2023 06:18:18 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 17794
IP address blocks: 103.247.92.0/24 maxlen: 24
103.247.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Validity
Not Before: Dec 21 06:18:18 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6583d8a9-0d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:4c:28:3b:71:14:ad:b8:32:38:83:44:3e:
68:12:04:06:6f:fd:5b:fd:c6:75:28:27:28:ee:a8:
4b:de:3a:da:16:f3:bc:9a:c7:33:a9:ee:d6:09:34:
36:f3:85:36:20:4c:7b:00:7b:38:18:7e:8a:6f:bd:
34:6f:90:01:f5:f0:21:c3:4c:1c:41:54:39:c7:4d:
3b:61:b4:4d:85:bd:5e:43:51:39:4b:0a:31:22:c8:
ba:a5:bd:6f:6c:50:e7:68:b4:1b:e0:b9:ba:27:15:
f3:f4:f8:ec:4d:20:a7:0f:ba:1e:a5:fe:db:88:a4:
48:c4:a9:92:7b:6d:98:4b:ae:e1:18:90:ae:7c:08:
dc:8d:27:00:29:d0:fe:21:97:3d:68:d6:68:eb:ba:
b1:7c:6f:58:02:63:14:9b:8d:39:0b:43:67:42:f2:
09:1d:42:01:a8:51:49:8f:32:fc:c7:8b:26:24:cc:
39:08:fd:24:df:7d:a2:ab:4b:5e:db:e4:23:f0:ae:
cc:7d:af:75:2a:26:78:a4:9f:bc:e2:7c:8c:25:86:
97:79:a4:84:8a:a4:0f:3b:cb:09:12:1c:fd:45:89:
81:a4:4b:cd:4c:b2:5a:8d:8d:56:e6:1d:2b:31:8a:
fa:80:a7:e5:21:6b:14:87:2b:97:86:e4:a2:20:32:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:26:AD:12:E2:44:94:4C:F5:3A:43:72:DB:1B:7A:CD:19:7A:45:DF
X509v3 Authority Key Identifier:
keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.92.0/24
103.247.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a8:51:3f:8c:d2:e4:4a:01:94:e4:fc:65:a2:21:6a:d7:c9:
74:05:ae:46:8e:1e:37:4c:29:19:dd:60:13:87:41:8f:be:b4:
b3:b5:f7:8d:7d:fd:48:57:02:ec:48:8d:35:9d:69:a9:6d:b7:
e4:bc:94:6e:76:d4:4a:39:3e:7b:67:d2:43:65:f1:2d:49:a7:
f7:01:19:2b:80:0f:bf:27:cc:f7:4b:30:13:9c:bd:8b:dc:df:
b0:49:f3:d8:a9:07:09:5d:a0:37:03:16:09:1d:7b:43:32:82:
a3:5e:98:7c:b3:28:7b:4e:fe:ed:96:3d:a8:b1:4d:7a:7a:05:
f1:9e:65:c2:75:e7:a5:c8:12:59:98:22:cc:26:55:08:70:3d:
10:0e:4d:44:24:14:46:45:64:bd:0a:50:3e:1a:7c:b1:d7:2b:
76:11:79:9d:c4:6f:07:a1:9b:5f:3e:1f:e3:d5:8d:d8:03:bf:
7d:be:f2:c9:e5:d3:ec:07:2b:cb:4a:6f:f1:2e:86:86:e6:be:
e3:08:8f:ab:d3:67:d2:fd:b3:59:f5:0d:62:e4:38:4a:da:ad:
a7:8e:54:fb:27:48:7d:68:78:f2:fa:57:84:68:59:af:f5:9f:
84:a7:ad:94:b7:d9:80:16:d2:a3:a7:ae:48:1f:ea:86:60:1b:
ef:f3:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:35 2025 by rpki-client