Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
File: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (raw, json)
Hash identifier: hxOmPvPOn5zrLZ2ksvGMh7mEDCQIxMBDMGA2oTUGfDw=
Subject key identifier: B5:EE:7C:0D:73:54:16:8B:97:FC:59:3E:4C:5F:1D:6F:A4:12:2C:FC
Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial: 0C6C
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
Signing time: Thu 08 Aug 2024 18:46:28 +0000
ROA not before: Thu 08 Aug 2024 18:46:28 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132341
IP address blocks: 103.14.73.0/24 maxlen: 24
103.59.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Validity
Not Before: Aug 8 18:46:28 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b51284-b6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:19:2f:9d:17:b2:7c:0c:cb:3d:f4:41:78:
f7:de:93:65:96:fc:bd:a1:78:61:9b:d1:c7:fb:86:
90:8d:47:9f:32:14:46:fa:3d:45:86:b6:80:1c:5e:
3a:48:7e:b8:47:55:a3:7c:c4:f4:9e:48:ee:eb:20:
31:68:28:c2:57:cd:09:08:72:37:9c:07:aa:a5:7f:
67:99:2d:97:1c:08:ad:15:6f:f9:d6:40:c7:d9:4d:
c9:a9:60:1b:ba:d6:89:01:96:36:f3:aa:54:45:73:
95:79:3a:21:1d:21:f0:46:77:b2:f3:60:f6:80:b2:
b9:50:0c:fa:b9:bd:db:5c:89:42:32:85:ec:f2:e3:
9b:53:ac:55:84:1b:d7:2d:2f:7b:d2:a2:22:61:39:
0c:ac:60:54:53:7c:e5:c4:ab:a0:3c:66:ae:94:fb:
3e:62:66:e7:1f:b9:2b:20:3b:b5:39:6e:07:6c:11:
2e:2d:dc:ea:87:5b:d6:3f:e9:c6:bb:06:36:8c:24:
fd:27:ec:33:69:2c:85:b7:a4:0e:c2:a0:b0:1f:6b:
60:d1:ff:cb:61:c4:04:b3:87:f1:41:ad:3f:78:c0:
64:ed:cb:99:97:c1:90:b6:9b:6e:dd:a9:91:e1:d5:
a1:a7:1b:30:37:1b:60:c1:9c:57:6b:b9:09:22:22:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:7C:0D:73:54:16:8B:97:FC:59:3E:4C:5F:1D:6F:A4:12:2C:FC
X509v3 Authority Key Identifier:
keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/08CA5724E2B111E9A73CAB51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.73.0/24
103.59.233.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:21:bc:e7:39:5b:0a:43:49:7e:e9:32:1b:21:d7:38:de:
36:98:73:cb:94:95:e3:18:02:2f:b9:d0:0f:8f:81:d7:d5:a4:
3b:51:53:77:66:06:18:ae:82:23:b5:7d:41:63:0e:71:8e:02:
6a:b6:31:43:28:6d:1a:18:57:6a:79:af:87:9c:c3:a6:67:1f:
c2:b3:d9:4a:52:f2:e5:24:8d:5f:30:36:9b:42:8a:fe:f9:62:
60:eb:ce:82:36:9b:ae:17:ed:a6:c8:57:4c:29:ad:fa:d1:c7:
5b:75:f4:69:fa:fd:44:f7:34:dd:3a:c0:9b:35:9c:73:01:68:
12:85:43:aa:33:b8:cb:e2:19:61:e4:8c:a4:5b:fb:cc:e2:f0:
27:60:fa:1f:ab:16:3f:7c:46:37:62:32:40:81:29:01:33:f9:
ff:d8:b1:10:ae:c4:0a:7b:15:66:88:9e:b4:c6:50:67:33:33:
b0:78:c7:62:72:9a:0c:08:b3:62:56:4e:fc:ef:78:51:7b:67:
34:28:74:bc:62:43:88:b0:66:57:6e:d5:18:b1:30:e6:57:2b:
a8:2c:9f:5f:f6:9a:28:aa:3e:08:06:42:85:01:10:e4:8f:49:
1c:aa:aa:5a:73:49:2b:bb:ba:e2:a9:95:7e:32:ac:93:96:0c:
dd:02:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:26:24 2025 by rpki-client