Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/110CB61EEFA211ED87AD1F0BC4F9AE02.roa
File: 110CB61EEFA211ED87AD1F0BC4F9AE02.roa (raw, json)
Hash identifier: ln6kjE1HduHHIWCF/si9qoxC6cm3GotB2vKTDwUMOYs=
Subject key identifier: 3D:8D:E9:03:8E:37:66:F0:8C:A0:8C:A6:DB:AA:79:E7:7D:08:5F:3D
Certificate issuer: /CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Certificate serial: 0126
Authority key identifier: 49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/110CB61EEFA211ED87AD1F0BC4F9AE02.roa
Signing time: Tue 26 Nov 2024 19:03:54 +0000
ROA not before: Tue 26 Nov 2024 19:03:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151203
IP address blocks: 103.69.104.0/23 maxlen: 24
2401:da20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D396/serialNumber=49D0F406972A805B1E7A9FC20FB3A9CCB7662ACE
Validity
Not Before: Nov 26 19:03:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67461b9a-ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:96:c4:2c:42:59:d4:15:72:07:d2:f4:16:
c1:05:4a:8b:8b:67:23:79:db:4c:01:4d:9d:83:67:
04:ba:64:b0:75:ac:c6:e1:ef:19:f8:2d:c3:0d:27:
0c:a5:0b:4f:ab:2f:4e:a2:be:3e:69:e4:5a:25:27:
a7:bb:c6:4b:4b:e7:e8:60:d9:cf:8d:3e:4a:62:c4:
0f:00:66:13:7a:39:af:ea:7d:d9:12:a5:0c:0c:ac:
cb:de:82:16:50:d0:a1:61:ef:62:d2:34:a2:e2:c8:
eb:5a:f5:59:50:f0:41:7c:2a:88:2e:dc:08:ae:d4:
c2:db:33:3d:be:dd:d7:0c:84:d7:57:ce:b1:fb:38:
ea:14:87:1f:c5:88:61:16:e9:ad:98:49:4c:9a:d5:
b2:d0:24:00:c3:27:c1:c5:d8:50:6a:88:ba:4c:99:
1a:d6:2d:55:64:08:d5:e2:f1:ab:a1:81:00:4c:31:
46:ae:ff:a7:92:85:e3:98:73:ad:99:1e:00:30:93:
d6:a5:27:6e:1e:84:b2:47:70:3c:9f:50:b9:5d:df:
f9:06:cb:d3:ca:a7:3f:3e:8e:1d:55:3b:9e:58:1e:
b6:5b:f7:f3:28:91:85:d4:df:28:30:96:bc:cc:20:
7b:5e:52:ee:9d:fe:49:48:1b:2b:a9:f6:28:68:c2:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:E9:03:8E:37:66:F0:8C:A0:8C:A6:DB:AA:79:E7:7D:08:5F:3D
X509v3 Authority Key Identifier:
keyid:49:D0:F4:06:97:2A:80:5B:1E:7A:9F:C2:0F:B3:A9:CC:B7:66:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/SdD0BpcqgFseep_CD7OpzLdmKs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SdD0BpcqgFseep_CD7OpzLdmKs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D396/95D0DF7AEF9C11ED9BF63B86C4F9AE02/110CB61EEFA211ED87AD1F0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.104.0/23
IPv6:
2401:da20::/32
Signature Algorithm: sha256WithRSAEncryption
1f:1f:aa:4a:c6:3b:7f:5c:b3:3b:8f:b0:64:f6:47:69:cf:07:
26:3a:b4:94:c0:c5:94:d2:21:1e:3d:99:81:b9:81:6e:f1:76:
01:55:9a:ad:9b:81:e5:e3:3b:3e:31:9c:b2:4b:d3:41:0b:6b:
dc:37:e6:cc:4b:98:c7:06:26:86:04:2c:81:20:80:fb:00:4c:
ee:f0:d5:32:65:3d:37:c8:47:bf:16:55:3f:48:50:16:60:7c:
16:7b:34:6b:88:ff:39:26:9c:97:9a:8e:24:ef:e2:3e:d8:ca:
aa:3f:8b:3d:3a:b6:d8:66:25:35:7c:40:2b:4b:17:3d:22:71:
05:31:11:c9:72:af:6f:7c:f5:13:c3:46:b4:a9:74:a8:81:2e:
2b:b2:ac:72:a2:ce:0e:e5:4d:a7:b6:75:d2:52:30:ce:f1:65:
90:91:27:e0:37:08:40:28:b7:15:d4:8b:3d:cc:0a:69:5a:ed:
df:d2:6e:07:c8:9c:ac:b9:5f:01:f5:a1:d3:be:ac:2e:fe:40:
b4:98:e8:04:73:98:0f:71:40:eb:90:03:44:07:f6:2f:b2:98:
4a:12:79:f8:52:c0:28:bb:a4:38:7a:b5:c7:96:68:a8:54:9b:
34:0d:e3:5a:f6:81:00:dc:07:60:c0:93:99:aa:e9:6d:ca:b0:
77:2c:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:59 2025 by rpki-client