Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa
File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json)
Hash identifier: nEgdbI6cuLNeRuLPJnkG4QO1ReMDMeUPyTkJXfsO5xE=
Subject key identifier: 87:15:B2:F8:F1:EF:33:27:C3:A1:4E:86:86:8A:35:4D:E6:77:FF:F4
Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Certificate serial: 74
Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa
Signing time: Sat 01 Jun 2024 09:47:32 +0000
ROA not before: Sat 01 Jun 2024 09:47:32 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 103.186.158.0/24 maxlen: 24
103.186.159.0/24 maxlen: 24
2400:72e0:9f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Validity
Not Before: Jun 1 09:47:32 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665aee34-a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:2d:3d:18:5d:dc:ea:34:95:8f:a5:4e:15:
19:ff:ab:82:50:1d:54:fa:f7:fe:fa:64:f4:f9:97:
5d:15:c6:b7:aa:4c:bf:b5:cc:c0:c3:29:87:16:d3:
2c:6c:32:d3:8f:8c:26:40:58:26:80:a3:0f:24:fe:
93:f6:a3:2e:a4:75:bf:f9:3d:f5:cb:a8:ec:9f:a9:
c2:e1:2a:06:05:51:4f:c5:f3:81:3e:0f:78:9c:70:
8d:d2:94:50:ad:3b:f7:27:75:80:bf:9e:b2:db:14:
fa:f1:a9:9b:ea:75:50:28:d0:f5:4e:d5:49:26:ce:
ae:67:31:5a:7f:14:ec:15:80:02:ad:2b:fa:d0:21:
a0:fb:5a:c1:1e:17:18:61:76:ed:a1:b2:cc:3d:29:
20:af:a4:72:c6:29:26:01:ae:ad:12:c0:2d:75:73:
1f:ca:60:4a:61:b1:1c:d6:3a:ee:80:b3:76:6b:f0:
f0:9a:ca:0b:f9:c5:b0:17:c7:4e:3d:c4:33:63:d0:
cb:28:1a:9c:67:4b:04:95:ee:09:b2:51:c3:21:7b:
dd:ed:11:26:f7:76:41:6a:d4:ed:4f:fa:88:b2:30:
ae:b4:15:b0:45:67:57:1c:c2:97:d6:2f:3e:f9:0b:
33:8c:ba:b9:10:8a:e6:67:05:4b:bf:e5:94:a0:2c:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:B2:F8:F1:EF:33:27:C3:A1:4E:86:86:8A:35:4D:E6:77:FF:F4
X509v3 Authority Key Identifier:
keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.158.0/23
IPv6:
2400:72e0:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
34:e8:9e:c0:7e:9b:4b:56:ac:a1:6e:c9:eb:6c:dc:e7:0a:88:
ab:3e:a6:0e:51:b3:52:0a:39:2d:e8:e4:4e:37:a9:9a:39:91:
a8:7e:27:29:a7:2f:2e:69:ea:d8:11:4e:1a:97:79:95:4d:49:
58:eb:a1:80:fc:c5:82:76:05:da:b4:8e:40:06:65:07:87:5b:
e3:67:0c:3f:55:c5:50:4b:95:e9:5f:f3:02:b2:f3:b6:6c:dc:
a1:00:e7:9e:8b:ee:01:47:94:72:54:f5:93:1c:24:31:7b:5d:
90:58:eb:e8:93:1d:93:cd:9a:3c:eb:58:a1:d7:f0:5d:83:02:
11:1c:fc:67:a4:53:9c:9e:f5:ad:05:1c:ba:8e:1d:56:46:1a:
0b:55:1b:a4:b0:40:be:88:b2:bb:1c:d3:5e:34:b6:53:73:e4:
80:97:5f:dc:44:c0:b0:72:4d:40:d4:8f:83:d7:a4:b6:b7:78:
7f:e1:44:17:c7:d6:5e:ce:05:23:6b:de:52:a3:2e:78:4a:9a:
72:a3:43:df:34:f2:c8:76:09:37:24:5f:ce:86:4d:31:e4:fb:
3d:86:82:a0:11:05:ca:88:a1:e5:b4:2e:45:54:ff:82:23:c3:
1b:54:9f:f4:21:4b:fa:e2:c3:50:ef:b5:ca:81:58:29:b0:8a:
66:ab:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:14:05 2025 by rpki-client