Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B46C8BFA89AD11ED93CAB75FC4F9AE02.roa
File: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (raw, json)
Hash identifier: kD/w2pEsMVUtTytSnR/xZcEA/RvnsimONEARk2tyefI=
Subject key identifier: FD:AF:E8:DC:78:AE:0D:11:85:4C:CE:9F:4C:BA:13:C6:4C:13:6A:C9
Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Certificate serial: 018E
Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B46C8BFA89AD11ED93CAB75FC4F9AE02.roa
Signing time: Thu 19 Dec 2024 02:25:49 +0000
ROA not before: Thu 19 Dec 2024 02:25:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141209
IP address blocks: 103.143.242.0/23 maxlen: 23
103.143.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0
Validity
Not Before: Dec 19 02:25:49 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6763842d-ca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:95:82:88:c1:2d:07:a6:94:d0:5d:e0:c7:
64:b2:4e:7b:21:0e:bf:b7:60:00:93:8c:78:d0:22:
d3:7b:e9:99:a2:5a:46:9f:d0:71:9f:39:b9:44:96:
9d:92:cb:38:92:2b:be:5a:bb:fb:bd:f6:e5:0e:ea:
93:85:12:c6:14:4a:dd:11:ee:c9:ed:b4:86:9f:70:
cd:68:31:09:d1:db:9d:dc:d6:8b:53:f8:4c:e6:a4:
fc:59:b8:a2:29:52:ed:91:8b:1c:3e:54:91:00:92:
b9:43:f5:d3:fd:17:96:0e:b0:c1:39:fd:55:3e:11:
91:9f:dc:b1:e2:f9:c5:b0:9c:70:55:19:ae:08:0f:
9c:f3:d5:fa:6a:a0:37:b4:a9:ff:dd:88:76:14:9b:
10:bd:aa:95:49:7a:f2:06:3a:33:f7:f9:7b:a2:1b:
16:62:6e:cc:0a:40:b5:fa:00:c2:63:37:29:01:61:
95:fa:80:80:9d:1d:88:79:29:db:1b:f9:58:a5:23:
f5:4e:95:c7:4d:98:0a:7f:a6:48:21:97:aa:df:c0:
e5:2f:4c:b4:33:d0:5a:7a:81:45:d7:6a:22:aa:94:
4c:7a:62:e4:d9:4c:6a:3f:8e:37:ae:2b:86:18:78:
21:50:7a:b6:59:02:a4:13:57:51:46:de:89:78:f2:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:E8:DC:78:AE:0D:11:85:4C:CE:9F:4C:BA:13:C6:4C:13:6A:C9
X509v3 Authority Key Identifier:
keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/B46C8BFA89AD11ED93CAB75FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:2f:df:38:09:af:b2:61:50:d6:8b:a8:45:6b:14:b3:c4:35:
a2:79:ab:49:00:6c:2b:55:a8:ec:c9:8c:6e:36:13:72:9c:2e:
53:a6:1c:50:31:53:6d:05:d9:2b:a8:8a:c1:d3:27:5f:f3:db:
0c:b9:19:a8:8e:53:79:05:b7:26:b1:90:4b:a6:a2:4d:35:0e:
9d:f7:c0:98:97:dc:e0:fd:51:7e:a0:b2:86:dc:36:96:7b:29:
9d:6a:52:08:e1:29:e6:51:f2:88:7c:df:cb:3f:d1:6c:55:22:
d9:1a:6d:4a:f1:a1:d0:a7:eb:41:86:51:9f:1e:25:79:63:34:
c9:ba:01:88:c7:f6:06:c3:eb:ef:71:29:42:b5:ee:3e:83:48:
6f:40:c8:96:ec:f7:1b:80:15:41:82:ed:cf:57:29:71:37:d6:
04:a0:4c:b1:8e:d2:eb:63:88:fa:f3:99:9d:f2:20:15:cf:26:
af:09:19:c7:56:b5:20:94:20:b8:63:5b:68:fc:14:df:dc:eb:
3a:9a:20:73:57:f3:93:20:c1:17:de:62:dd:97:39:3c:95:37:
27:7a:da:f3:79:94:c1:79:b8:14:3f:3f:cd:d5:89:9d:67:7c:
8f:fd:62:7a:2c:09:d9:62:4a:4e:30:a1:73:93:01:af:ee:56:
83:d1:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:24 2025 by rpki-client