Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/4B1D295E9EA211EB901A9532C4F9AE02.roa
File: 4B1D295E9EA211EB901A9532C4F9AE02.roa (raw, json)
Hash identifier: /xWesDsMi1pD+tn1de40Hq3CgHdzNliJuaUvah0mIOk=
Subject key identifier: D8:2F:33:BF:67:FE:09:8C:C7:99:D0:00:F8:3E:8B:60:E7:96:D5:04
Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Certificate serial: 0A4B
Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/4B1D295E9EA211EB901A9532C4F9AE02.roa
Signing time: Wed 28 Feb 2024 20:28:46 +0000
ROA not before: Wed 28 Feb 2024 20:28:46 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140050
IP address blocks: 103.147.226.0/23 maxlen: 23
103.147.226.0/24 maxlen: 24
103.147.227.0/24 maxlen: 24
2001:df4:d180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2635 (0xa4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Validity
Not Before: Feb 28 20:28:46 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65df977d-c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:37:a5:19:80:7d:3d:32:ce:e5:f6:66:1d:
33:0d:73:89:03:1a:1c:b0:bc:11:dc:6d:65:84:da:
78:ce:c5:41:5a:15:bd:0b:54:73:5b:91:04:45:23:
df:fb:46:a7:0f:9e:88:53:a5:f0:cd:89:b5:fd:dd:
a5:93:6f:26:eb:62:ab:92:53:d4:8e:09:6c:de:3e:
b6:c4:74:0d:47:d7:45:40:f3:20:bf:7a:ee:45:1e:
ea:4d:25:f4:a5:d0:7d:cf:7a:24:d2:0a:3e:80:1d:
30:1f:8d:0a:1e:ec:de:45:a3:77:40:f0:23:35:88:
7b:be:eb:10:9b:bf:1c:a8:54:96:b2:08:aa:c9:b8:
20:48:f3:3f:2c:c0:f6:4b:bd:df:16:88:d8:b6:5c:
aa:97:0c:42:b0:4e:8d:74:cb:67:8b:17:02:26:ad:
70:00:ad:c1:75:86:8e:a8:7e:64:7b:20:9c:c5:0b:
02:4a:7e:f0:6f:b2:15:67:a9:fc:92:d6:df:48:2e:
db:b2:3f:b6:5f:2a:47:ba:1d:9e:dd:78:96:d6:2e:
61:1a:57:49:2b:53:2a:9b:6e:3b:3c:1d:d1:9f:e8:
5d:eb:86:56:56:15:be:81:fd:a0:da:20:a2:84:d9:
2e:52:f9:97:61:15:93:9b:92:4b:a3:b1:b2:58:d9:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:33:BF:67:FE:09:8C:C7:99:D0:00:F8:3E:8B:60:E7:96:D5:04
X509v3 Authority Key Identifier:
keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/4B1D295E9EA211EB901A9532C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.226.0/23
IPv6:
2001:df4:d180::/48
Signature Algorithm: sha256WithRSAEncryption
27:66:56:a7:4f:14:5c:05:6f:52:98:d5:8e:48:c0:3a:db:e8:
82:0b:3f:ff:91:c7:d7:59:c8:fd:06:62:ff:29:d8:4b:5f:69:
8b:72:12:3d:6d:7a:26:8f:0d:d8:e0:f3:4d:85:3b:d6:0a:9e:
d4:c5:f8:b2:df:e4:a2:12:f3:be:61:f2:21:81:de:60:28:67:
dd:19:ac:81:61:c7:da:55:2c:dc:be:33:f3:9d:98:aa:87:64:
37:70:ec:03:fc:62:a0:65:bc:a1:69:6c:5c:95:65:6b:bb:6d:
00:a5:7e:34:5f:56:57:4d:2b:62:19:79:75:d6:4f:2d:74:70:
45:7e:f3:8b:f8:36:a7:7f:43:d9:20:6c:3c:8a:66:5d:33:82:
1c:c7:b8:85:79:ee:5f:5e:71:67:6b:83:e5:e2:62:7d:52:fb:
0e:22:83:f8:3b:1d:a1:6c:01:9c:3a:5a:55:b9:d5:77:63:24:
b8:52:e8:9a:b2:b4:cf:5a:e5:dc:a0:b0:f4:7a:c5:eb:63:82:
2c:65:79:70:6a:9c:6c:93:1f:f2:2b:08:cb:af:f0:09:62:7c:
58:ec:31:0b:e8:d5:5f:c8:d8:f9:4f:84:15:23:2b:4e:6d:1c:
b6:71:b7:82:f0:1b:9d:5f:39:8b:16:ae:22:3d:6a:c6:8f:b9:
74:55:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:11:54 2025 by rpki-client