Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
File: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (raw, json)
Hash identifier: Mjvz0g/6VHNBx1WBrf/RAQ24UJcGDEU3e3YasLXb4ZU=
Subject key identifier: 43:5A:34:FE:4F:A3:E4:B5:F2:CD:5E:80:96:0B:DB:9D:8C:F7:B0:43
Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial: 01B6
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
Signing time: Sat 27 Jul 2024 03:55:37 +0000
ROA not before: Sat 27 Jul 2024 03:55:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150165
IP address blocks: 103.143.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Validity
Not Before: Jul 27 03:55:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a46fb8-e8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:34:66:d5:9c:90:ec:bd:fe:f1:27:4d:85:
51:7e:1d:95:74:29:aa:4e:11:c5:79:09:b1:42:cf:
da:76:30:e8:22:26:bc:45:a7:51:0d:77:b3:e7:8e:
47:dd:aa:b1:3e:c5:10:5b:08:43:25:7a:f5:5a:39:
84:fa:f8:66:3c:17:53:53:7b:88:d6:d0:3a:fd:ba:
fc:5f:2d:48:39:c1:39:0b:d4:21:3b:c5:45:08:8b:
7b:d7:09:96:c7:b5:ef:64:09:db:e8:23:ba:32:be:
82:30:c9:2c:55:a5:6f:b2:33:44:bf:e8:3f:2f:18:
2d:3f:e5:a3:e7:b6:6e:1e:a6:dd:65:ae:57:3d:72:
e2:89:8f:6d:8d:53:66:b9:f9:3a:f9:84:1b:32:c4:
73:94:7c:e6:65:09:b8:18:2d:c3:06:21:b4:38:d1:
a4:95:c9:af:ea:9a:23:79:87:a9:6a:22:11:f6:c3:
a9:83:ae:5b:7e:45:db:ac:51:cb:b1:8c:03:e2:00:
f3:48:8c:dd:b9:0e:4c:02:8c:5f:ea:e9:60:64:f4:
68:3d:db:b1:36:2f:f5:5b:07:bc:f2:df:cb:53:18:
f0:86:4f:4c:7b:84:e6:3e:67:28:87:e0:5c:20:01:
e4:65:0a:de:9e:2e:be:07:74:37:fc:22:46:98:eb:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:34:FE:4F:A3:E4:B5:F2:CD:5E:80:96:0B:DB:9D:8C:F7:B0:43
X509v3 Authority Key Identifier:
keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/4C0F405E1E1C11EDA19CF560C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.236.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0d:e8:cb:b8:24:a5:69:2b:0e:99:56:46:c4:02:ac:32:5f:
25:e7:e0:dd:48:91:5e:a3:0e:e4:c4:f5:9d:33:2c:72:b1:db:
ef:7c:cd:02:5f:75:77:1e:92:d0:4c:a8:69:57:72:ac:4a:0e:
28:32:29:14:ff:f4:99:0a:65:b8:b6:8f:5e:f7:13:a5:35:bc:
73:a5:03:69:6f:91:03:3a:00:1d:3a:a1:be:c1:5b:49:ca:2e:
84:b2:65:06:ec:96:90:e4:bd:27:cf:ad:33:19:5c:b8:6a:ff:
6f:06:21:3b:b2:50:a9:11:4b:a0:ad:bd:17:2d:d3:b0:d2:df:
a4:3a:a8:7b:fd:08:d4:df:b4:de:e6:7f:01:3e:d4:d7:8b:0b:
a8:ed:15:db:7f:a7:62:10:5d:03:a4:1c:fe:bd:c2:c9:d6:e9:
df:d1:e2:f2:dd:53:d5:fa:c0:53:5b:ad:42:cc:fb:db:9a:16:
14:6f:f5:16:88:95:07:ca:58:d4:79:28:03:71:1d:f9:fa:ca:
cd:9d:af:e4:2f:50:09:03:aa:56:b8:cb:36:9d:ae:bb:e4:01:
14:f5:29:41:c3:48:c0:db:d4:db:7f:9d:c5:f3:83:51:b7:19:
72:0a:6f:b7:6b:83:d0:7f:39:44:fe:c1:c6:5d:eb:fd:5e:c8:
87:7c:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:03 2025 by rpki-client