Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
File: 07F14B9C426411EABA91B569C4F9AE02.roa (raw, json)
Hash identifier: nseKpzm/ZWWtW2UIWjTt9RcmdCE4ujuM4SPShmqFf3Y=
Subject key identifier: 21:46:C9:E1:D5:2B:30:8E:A1:51:12:7F:30:81:C6:DA:04:1C:8B:35
Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial: 0A2C
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
Signing time: Sun 10 Mar 2024 20:28:55 +0000
ROA not before: Sun 10 Mar 2024 20:28:55 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140063
IP address blocks: 103.148.10.0/23 maxlen: 23
103.148.10.0/24 maxlen: 24
103.148.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2604 (0xa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Validity
Not Before: Mar 10 20:28:55 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65ee1806-c142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:8f:a6:ee:47:b0:99:3d:d9:24:95:24:ec:
f8:6b:8b:77:af:31:0b:0c:b4:b6:96:ed:b0:9a:d8:
54:70:b5:c4:a4:0e:4f:fc:87:5b:7d:a5:86:22:4e:
c8:5f:b6:82:44:bb:76:f3:65:71:cc:eb:17:27:8f:
27:21:b7:96:8c:19:0d:e6:04:67:84:9b:8e:b8:d9:
31:63:7c:ed:4a:46:cc:80:f8:fd:31:f3:92:af:8d:
97:dd:91:b4:8e:b0:84:53:25:6d:57:48:81:b0:1f:
e6:ff:9d:05:d6:a3:bf:76:83:18:27:04:40:9b:85:
8d:a3:2d:60:68:0a:c0:94:98:49:5a:53:8c:c6:9a:
02:a9:0c:98:08:0e:33:2e:95:58:b5:cc:01:49:7e:
09:07:98:1c:26:65:d3:ba:42:19:e5:7a:f5:83:f0:
8b:4f:77:48:52:1e:17:11:3a:55:4a:cd:7d:4e:e0:
c2:44:bd:09:ed:24:43:ee:70:5d:25:0c:e5:64:97:
6b:44:ec:f8:cd:18:d4:96:76:32:4d:2b:5b:96:5f:
21:37:3e:70:38:e5:13:97:dd:2f:a3:6d:d7:5c:eb:
9f:53:6a:94:46:08:26:5f:c9:32:c8:43:dc:ea:fd:
e4:2a:72:c8:56:86:26:65:9a:ca:72:2a:44:2f:21:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:C9:E1:D5:2B:30:8E:A1:51:12:7F:30:81:C6:DA:04:1C:8B:35
X509v3 Authority Key Identifier:
keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:58:12:ba:39:4b:fb:63:f4:83:ef:cc:fe:78:98:fc:a4:60:
93:19:69:51:14:53:85:34:df:fc:4d:e5:af:de:11:ee:5f:bc:
05:1d:06:ba:36:5c:08:c8:e4:a2:5f:e5:82:1d:fc:fc:85:14:
98:58:15:fd:8f:12:d8:41:76:ea:34:be:bc:6f:9a:c9:f1:4e:
7d:29:22:4c:ca:fe:99:c7:67:d2:6e:32:f8:b6:6d:22:5e:fc:
49:3c:e2:5d:1f:06:69:d7:8e:08:bc:fa:72:bc:d1:e7:44:11:
c3:e0:46:22:15:b5:92:e9:41:3c:48:f6:85:f2:e1:33:3a:0d:
dc:b8:a8:6a:03:83:0c:e0:55:d3:ca:46:29:36:43:c8:54:70:
7b:94:84:ca:11:fa:89:27:10:08:d9:6f:f9:e0:e1:f8:70:ae:
bd:d8:45:32:1f:82:36:19:b6:7b:73:08:fb:42:6e:69:87:1e:
d0:27:b6:a6:4f:28:85:16:cc:1a:b9:74:d7:65:d0:59:eb:cd:
15:cf:48:0e:51:38:9d:b3:a6:c6:07:ca:7c:52:3e:e8:9f:e0:
62:08:42:78:87:74:25:85:dd:c4:f5:cf:fd:54:0f:f5:e4:2c:
99:93:ed:24:32:67:f1:87:1a:bb:c3:a4:ab:74:fc:93:4c:8c:
c8:a3:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:24 2025 by rpki-client