Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
File: ADB6934A9A4911E7857CA62FC4F9AE02.roa (raw, json)
Hash identifier: Pqm+kfFVeVJJT52PIyCw8FkJYkhG46t2Pk315FyyFs4=
Subject key identifier: DB:3D:7C:BB:42:9D:C3:96:2C:DF:C4:11:46:C0:A6:CF:43:4F:69:7E
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1B1E
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
Signing time: Tue 30 Apr 2024 16:54:21 +0000
ROA not before: Tue 30 Apr 2024 16:54:21 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 64077
IP address blocks: 103.205.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6942 (0x1b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Apr 30 16:54:21 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6631223d-35c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:8c:f3:a2:88:34:be:c7:91:90:34:1e:b4:
1d:84:50:32:7a:98:01:c2:fd:9e:17:98:f3:fd:9f:
ef:09:15:e3:60:c4:2e:c4:44:92:a6:5b:19:b8:6f:
0e:e6:f1:f1:3c:b0:b6:fa:24:4a:ae:72:47:a1:5a:
6f:07:a4:1a:9a:1d:7b:eb:a8:09:d6:42:72:f2:60:
77:c1:4a:1f:0f:e1:d5:c3:5d:2d:7b:76:1d:8e:e9:
59:30:dd:40:b3:63:93:82:5c:48:4c:e7:6e:b8:81:
ce:48:d2:09:8a:53:d0:1c:a3:b7:d2:57:05:57:78:
9c:6e:da:e8:bf:d7:2b:49:0d:b6:d6:7f:75:8f:52:
ce:b0:d8:a2:3d:ba:31:74:b0:61:fb:60:01:f1:fc:
bd:c7:04:f2:ea:6a:bd:d7:bd:ea:bb:3f:a0:ad:f9:
df:09:82:c9:d1:25:da:58:d5:07:9d:9c:a9:c0:30:
81:f4:78:78:7c:a4:35:f7:d0:7c:b5:e4:c0:95:e5:
ce:d7:77:99:cb:e5:27:24:6c:3f:f1:da:2f:d2:39:
a7:ae:f3:32:1e:00:d5:6b:c4:82:a2:5e:37:0a:94:
a3:0d:4c:e9:a7:9b:bb:a9:48:bd:3f:87:27:80:95:
c0:db:08:05:42:a1:a3:f3:fe:b7:73:47:fe:bd:44:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:7C:BB:42:9D:C3:96:2C:DF:C4:11:46:C0:A6:CF:43:4F:69:7E
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/ADB6934A9A4911E7857CA62FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.133.0/24
Signature Algorithm: sha256WithRSAEncryption
33:28:2a:47:0b:5c:e6:cf:08:23:46:0a:03:26:53:d0:de:d2:
b2:dd:50:20:78:64:70:62:7b:16:c1:b2:c6:b8:73:93:e6:f2:
1f:0c:3b:c7:c2:30:41:96:74:4d:6c:37:23:24:95:01:08:2c:
a3:4a:92:3f:f5:0d:27:61:e8:c0:69:f4:dd:d3:cc:5c:69:f9:
60:8d:62:e0:f2:ff:f3:3d:54:5a:af:54:fe:70:0b:cf:bf:5c:
7b:30:07:88:4a:f8:cc:73:04:29:35:54:34:fd:b1:91:e5:aa:
f4:ab:20:ff:00:12:61:1c:69:cc:f1:d7:fe:2e:60:1a:c8:aa:
68:a3:79:92:8d:4a:2b:eb:8f:ec:54:c6:ef:f9:73:30:19:9b:
8e:30:28:10:0e:30:75:e9:35:07:00:a3:c1:24:79:74:4d:58:
b3:67:5f:a2:6a:6c:4b:97:a6:ce:c2:0e:4b:74:d5:09:02:39:
ae:35:76:da:4e:40:9e:32:e2:b9:c2:20:a8:ce:63:fe:85:73:
c9:51:ff:37:9c:6e:3c:37:e6:53:ce:de:c8:4f:8c:c1:19:ec:
44:01:b8:90:34:d7:a5:f2:14:ad:56:1b:3e:48:44:11:de:e8:
06:a1:af:48:34:3d:ed:88:44:b1:fd:30:91:a9:8c:f8:be:51:
13:c3:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:39 2025 by rpki-client