Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
File: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=
Subject key identifier: 25:4E:96:C6:47:79:CA:D9:AB:34:7E:9E:DA:F7:C5:10:5B:A2:25:41
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0B77
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
Signing time: Sun 22 Dec 2024 19:17:17 +0000
ROA not before: Sun 22 Dec 2024 19:17:17 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 64098
IP address blocks: 103.143.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B
Validity
Not Before: Dec 22 19:17:17 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676865bd-9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:d3:84:ab:6a:cf:85:fb:99:1d:ce:63:96:
27:94:87:68:d3:87:41:1c:14:bb:e9:5b:71:49:58:
c9:8e:57:4b:7e:d6:07:6c:cf:a9:29:06:6e:f2:a8:
81:3d:98:cf:88:47:b9:d1:43:0b:65:33:1d:0c:4c:
72:9a:f9:57:f6:d1:0a:78:58:65:47:2b:98:17:18:
38:45:b9:d0:60:71:3b:15:8e:e2:ba:6e:97:5d:a4:
35:40:64:6e:1f:5f:32:5f:b1:76:f8:23:45:db:ca:
7e:64:e7:56:ce:6c:97:10:92:2b:10:68:dd:2f:13:
68:6b:1a:2f:17:e6:ca:6c:8d:dc:f1:54:6e:3b:a6:
7b:ad:cc:cd:a9:09:4f:16:57:22:70:a8:ae:0f:d9:
96:74:7e:ae:41:45:76:52:8f:b4:06:7e:bd:df:ef:
f0:2f:a1:57:01:94:89:68:89:32:bd:57:44:7a:6e:
e5:38:94:7c:23:d4:0a:9a:59:b0:b5:a9:a7:f1:82:
c9:64:07:29:30:42:84:c6:66:0d:f9:5a:b2:9c:dd:
0f:b4:4a:92:87:cd:c7:1b:04:c3:cc:b4:f6:56:23:
92:17:1f:1d:03:0a:18:cd:31:8b:e4:55:39:6a:6e:
3a:bc:8a:44:98:c2:d5:87:63:e0:f9:f9:ed:47:34:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:96:C6:47:79:CA:D9:AB:34:7E:9E:DA:F7:C5:10:5B:A2:25:41
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4DC77C600A9111EEB13EAF44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.172.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a4:60:60:e5:b5:39:4d:58:01:92:fc:0a:0b:57:dd:92:66:
16:87:83:09:9d:be:da:d2:00:43:3e:19:ff:f7:9d:a2:35:60:
6d:00:45:28:3f:87:ad:22:96:4d:78:34:d6:b5:bb:7e:42:7d:
18:bf:cf:c4:8e:85:63:8d:4c:49:bc:69:18:b5:e7:04:69:12:
ce:dd:31:de:11:5a:d2:75:d5:8b:c6:df:5b:0c:ab:32:52:af:
cc:f0:37:49:e5:69:c2:b1:db:06:02:ec:7a:a5:63:35:08:c0:
66:ff:ba:fc:ec:f4:33:26:c6:67:3d:24:4a:11:4e:16:96:24:
c4:84:ef:64:dd:19:19:5a:59:8b:ef:c6:f0:3f:47:28:61:24:
29:e2:0d:8d:ea:08:6b:ce:12:0d:30:55:83:e4:9b:dd:35:5e:
c4:49:76:c8:84:50:98:7e:34:05:ec:38:3d:68:be:2a:85:20:
a4:6e:1b:75:84:0b:93:1e:a0:f7:ab:91:6c:ef:dd:01:ff:08:
04:ef:0a:d5:60:01:c2:c6:53:e9:c0:37:ee:e1:74:3d:52:80:
96:31:2b:4a:28:42:7b:55:79:1c:14:22:ec:9c:71:2d:a0:03:
04:1c:18:b1:7a:43:e9:17:09:9a:8e:1d:b5:8b:b6:b5:8d:cf:
fc:16:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:10:02 2025 by rpki-client