Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
File: 347B37060B7011F0BED04B49C4F9AE02.roa (raw, json)
Hash identifier: pQpuCZn5VYJdmwXjLqjs5m3xSfcDbn3JK2oThkiWP20=
Subject key identifier: D6:4B:3E:FD:CE:2A:EC:32:09:EF:A7:F2:5A:0F:26:A5:54:FE:88:02
Certificate issuer: /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial: 14
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
Signing time: Fri 28 Mar 2025 01:01:39 +0000
ROA not before: Fri 28 Mar 2025 01:01:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138653
IP address blocks: 103.135.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911049F
Validity
Not Before: Mar 28 01:01:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67e5f4f3-2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:d6:77:46:57:53:c6:22:12:cb:b6:81:a0:
07:6c:34:36:56:42:5f:57:80:0f:9c:da:14:9c:08:
ad:ca:68:ec:ff:4e:dd:14:fd:9d:24:d1:a7:ad:d3:
6a:ac:fb:aa:58:c7:ad:fb:ad:03:63:08:c9:2c:ec:
05:4a:3f:64:61:15:6f:24:db:8b:37:33:92:ae:2c:
95:5b:90:07:d9:92:ed:28:24:f9:4f:ad:8d:b2:68:
c3:f4:36:bc:2c:84:d1:55:d1:63:11:61:b4:8b:73:
b6:2b:8d:b1:fe:84:7f:7b:07:70:79:73:85:47:9c:
4b:71:78:5e:01:ed:39:2a:e6:3b:7f:a8:3a:75:0e:
be:22:bb:e4:21:98:4c:9a:79:ec:76:5a:bc:63:54:
9a:29:f2:a8:5a:34:0a:d4:36:5f:04:31:4d:46:8a:
df:39:95:46:72:cc:7e:e0:e0:85:dd:1e:71:4d:f6:
0c:9c:ad:12:d5:f6:ec:ac:bc:a0:bb:12:88:9b:59:
19:a5:32:2b:22:41:d8:84:d4:e4:a0:40:c3:b5:bc:
a1:cf:56:2e:2a:52:fa:18:a2:cb:a0:20:77:8e:73:
32:97:e0:18:89:bc:9c:0e:81:06:b7:5e:7d:a1:6a:
4c:72:47:98:d7:c0:6d:97:02:b9:cc:96:f3:75:cf:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4B:3E:FD:CE:2A:EC:32:09:EF:A7:F2:5A:0F:26:A5:54:FE:88:02
X509v3 Authority Key Identifier:
keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/347B37060B7011F0BED04B49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.231.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ff:2a:02:4d:18:1f:89:a6:0e:f9:6f:86:1c:30:57:30:e5:
56:5c:aa:15:45:8d:d7:16:82:88:96:3c:e8:4a:3e:17:39:22:
12:1e:79:0f:e5:5e:8d:fa:f0:ed:54:a7:c6:b2:07:4e:c6:3a:
54:99:16:95:b5:e0:78:54:4d:b0:c5:29:ba:b2:54:dd:1d:86:
73:5d:d9:38:5a:33:22:f5:9d:c8:a8:22:82:75:ab:ee:3e:6f:
07:8a:a8:52:cf:3a:a0:a0:df:84:02:bd:33:cf:ad:e5:27:13:
8c:bf:b9:9c:4b:23:94:88:51:99:6f:28:69:d0:0a:e5:ce:f8:
c9:42:ad:33:de:7a:96:b4:81:73:59:56:4a:64:f8:b6:26:f7:
39:d5:bd:58:3a:ac:01:fb:ad:1c:7a:4b:50:55:11:b6:1a:2e:
1a:cf:7a:ba:85:e6:4f:8e:03:d2:e9:41:46:ac:c7:48:13:76:
94:dd:ad:a7:99:a0:d4:03:84:55:85:d6:35:ff:3f:ba:8a:8d:
cd:4a:34:0f:a7:c5:46:88:ae:8d:60:60:f6:d4:31:2c:4b:f2:
1b:69:60:1b:16:5b:ff:0b:03:73:87:2f:10:63:54:42:e8:4a:
e2:15:93:3b:9e:37:44:85:9f:04:07:13:86:7a:8d:8b:05:18:
b6:13:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:03 2025 by rpki-client