Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa
File: 4D7F18D69F8911EC8270CE39C4F9AE02.roa (raw, json)
Hash identifier: DvvVhTWHCUbaFBHxMQ8UUW6nZ5VH6Qlov4BUrN8E2sA=
Subject key identifier: C8:E9:15:CC:3A:87:AE:00:83:8D:75:CC:53:35:02:D0:BB:02:03:2B
Certificate issuer: /CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005
Certificate serial: 02E5
Authority key identifier: 93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa
Signing time: Fri 21 Jun 2024 02:33:34 +0000
ROA not before: Fri 21 Jun 2024 02:33:34 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45102
IP address blocks: 103.151.206.0/23 maxlen: 23
103.151.206.0/24 maxlen: 24
103.151.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005
Validity
Not Before: Jun 21 02:33:34 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6674e67e-c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:b4:fc:7e:70:13:f3:dc:cd:f1:9c:15:a1:
50:ae:52:1c:7a:a4:e0:2c:8e:32:85:d1:ba:40:be:
d6:6b:aa:13:88:e3:27:3b:aa:a3:b8:35:7d:67:f9:
3d:18:da:72:d2:f6:ca:f1:6b:65:d8:89:39:d0:a2:
bf:f3:db:75:4a:6d:1e:32:9a:d5:f0:fe:d4:bf:31:
df:00:8e:2d:ea:21:99:61:25:8d:d6:bf:25:41:20:
c5:46:66:25:f7:cf:58:80:6a:e6:08:f5:10:38:ad:
5e:f1:a9:64:68:35:ab:81:ca:c1:d1:e5:b5:c0:35:
35:11:c3:86:b6:9b:1b:c6:44:25:50:99:57:42:36:
97:ee:a3:a8:8a:d1:0a:9a:37:46:08:3d:e7:e5:41:
4f:5f:58:fe:54:0e:ca:4d:3d:b7:78:62:f2:b7:6d:
aa:f5:7f:39:1a:84:82:62:46:38:57:a0:5d:e3:5a:
7d:76:42:0b:e7:c6:74:4c:5d:bc:a6:1e:58:b7:ff:
86:ba:88:5c:88:64:9a:7a:7c:0c:6a:a2:b9:08:99:
fb:9c:6a:f1:96:91:80:51:b9:29:42:5f:83:25:12:
da:aa:03:86:74:57:51:d6:a7:e4:50:ed:21:66:f4:
b2:21:ae:85:92:b0:19:e6:ac:60:b3:72:3c:9f:41:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:15:CC:3A:87:AE:00:83:8D:75:CC:53:35:02:D0:BB:02:03:2B
X509v3 Authority Key Identifier:
keyid:93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:cb:8a:27:40:b1:2b:0a:87:e5:49:20:e2:95:7a:68:7a:19:
d0:b4:6b:9c:07:c7:0e:97:09:8d:57:88:4b:88:ff:0a:0a:c7:
23:6d:5c:25:18:13:11:6b:0e:69:59:5c:54:8f:43:b1:89:06:
9d:5c:95:8f:45:37:c4:12:38:6b:2d:e8:7d:23:58:9b:1b:ed:
f0:0d:5e:39:e5:60:f7:54:35:fa:28:e7:d1:83:04:7b:10:bc:
6c:12:b4:ad:60:58:f1:da:d5:83:ef:2a:bd:46:64:41:ae:14:
50:a6:17:0c:52:31:f0:e0:0c:ea:e9:94:9f:62:e2:3b:c7:6a:
ed:48:8e:8b:d4:df:28:94:ac:b8:4d:d5:e2:5c:6c:5a:eb:05:
4a:4e:79:a1:01:2e:3c:ef:cb:c9:fe:fe:92:73:5b:7c:a5:f3:
0a:f2:81:2c:d1:da:14:da:f6:4c:80:51:77:5c:13:b0:a1:31:
3f:e1:1f:da:4a:f5:db:9f:3f:83:5d:60:73:b3:67:96:be:ba:
ad:9f:96:26:18:4d:92:8f:20:e8:f6:9f:ad:4f:d8:15:83:16:
32:b8:36:81:c2:95:c1:5a:39:71:dc:04:bf:ed:a3:18:40:32:
a9:b1:ce:b0:da:6f:3a:7f:c5:80:40:9b:19:72:31:11:f9:ae:
5e:22:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:08 2025 by rpki-client