Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
File: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (raw, json)
Hash identifier: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=
Subject key identifier: CC:A4:4B:52:8D:B3:06:0C:C0:59:E2:92:A3:DA:04:1E:C3:F8:6C:6E
Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial: 0A24
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
Signing time: Wed 14 Aug 2024 20:18:16 +0000
ROA not before: Wed 14 Aug 2024 20:18:16 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 396982
IP address blocks: 103.246.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Validity
Not Before: Aug 14 20:18:16 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bd1108-7a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:ae:8d:ba:03:a6:69:34:34:b3:ab:26:28:
ea:9e:e6:6f:12:d6:7d:42:b1:d4:6f:8f:a6:e3:56:
40:ad:b4:64:1e:e4:af:cc:fd:37:5c:c8:d2:10:d7:
f9:a4:e8:2e:ba:3c:a1:4e:6f:42:77:2a:cc:5e:1f:
31:9a:d8:79:0c:75:28:0f:3b:21:61:db:17:23:a0:
0f:2e:a1:80:ac:49:5e:e7:cb:22:43:fd:26:04:0d:
83:41:5d:23:62:5c:89:8c:cd:83:2e:74:e7:2c:64:
50:db:5f:1b:a8:6c:88:fc:6e:9c:9b:bd:d6:83:3b:
a6:bf:d9:fc:51:a8:fe:94:32:36:88:33:12:8f:06:
aa:cb:46:c5:d6:52:f2:c5:75:bc:64:6c:eb:15:79:
ad:92:75:8f:95:af:34:f2:6a:b0:81:07:b3:7e:1f:
8c:7d:a1:13:db:02:6c:c1:67:5e:74:d8:b9:b2:99:
cd:b4:5a:ab:1a:52:71:27:de:38:58:da:73:70:b9:
bc:3c:c9:6c:69:38:b5:e7:82:23:fd:32:7a:ad:a3:
41:b0:07:b1:97:18:e1:e9:9c:46:a0:16:93:11:eb:
5b:e1:60:e6:fc:1c:61:45:f0:cb:8f:42:77:f2:2a:
72:0b:22:94:d9:0a:37:84:49:b0:4c:78:07:9c:6d:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:4B:52:8D:B3:06:0C:C0:59:E2:92:A3:DA:04:1E:C3:F8:6C:6E
X509v3 Authority Key Identifier:
keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/FDF734905C9D11EA91DB3C7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:df:84:a8:4d:2e:c7:57:0b:4a:9d:ea:1a:4d:cc:7b:fe:8a:
45:13:1f:14:83:b0:38:1f:7a:1b:ff:16:21:80:e9:ff:b4:95:
b7:47:91:86:de:90:21:f4:bb:5e:92:7e:35:39:66:77:99:bd:
fb:1d:cc:eb:be:b1:8c:b3:c6:e0:fa:35:bd:65:74:79:25:dd:
9e:df:cc:ec:bb:95:3e:33:42:ac:a5:23:33:69:b3:10:c6:ba:
8b:9c:17:2c:84:c2:e1:a5:c0:97:ac:7d:1b:c9:ff:60:5c:20:
fa:c6:fd:8a:5b:81:2a:e2:2f:19:d3:d9:fb:e2:c7:76:02:45:
bc:d0:81:93:40:d5:0c:6f:22:05:3b:b0:87:b1:a1:9f:95:28:
40:f1:b0:1f:32:11:2e:91:5f:52:13:76:66:86:cc:05:88:0d:
a3:22:a7:06:16:36:fe:4b:e8:1a:98:f6:de:1c:41:ae:46:e3:
35:57:55:f6:13:77:f8:61:ee:20:b5:8d:99:88:47:99:65:74:
65:a3:44:82:b4:d1:09:66:95:84:29:3e:9b:49:c1:81:17:5a:
9a:0e:7c:c2:22:aa:86:09:93:68:63:bb:ce:11:88:82:e3:df:
83:11:d4:60:7f:18:49:63:53:95:39:6d:70:fb:cd:e6:9f:b4:
0f:36:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:39 2025 by rpki-client