Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
File: 6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa (raw, json)
Hash identifier: T5YnZQjH2m4Hfe6rmll+jwfz3AMSIUxQSwj7Vnso8Gk=
Subject key identifier: 13:F0:2E:E4:9D:AD:16:EA:96:48:4D:16:E7:78:07:33:8F:8A:DA:A8
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 0945
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
Signing time: Wed 12 Jun 2024 22:07:51 +0000
ROA not before: Wed 12 Jun 2024 22:07:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138546
IP address blocks: 103.114.25.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51
Validity
Not Before: Jun 12 22:07:51 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666a1c36-7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:ad:84:77:e4:ea:9c:81:fe:cd:40:48:86:
d2:60:f1:6f:c3:09:31:4e:5f:4f:ad:35:b2:f5:76:
54:b5:09:20:9c:9d:54:37:4f:ed:76:5e:25:af:2f:
9e:d2:a4:eb:0e:8e:96:60:9b:43:0f:d1:f2:7e:87:
94:c4:29:ce:28:90:31:d8:03:a8:fa:e0:39:ed:65:
d1:b1:a6:03:dc:7b:c2:32:5a:34:a2:ee:99:5b:68:
d5:a5:60:d6:e8:7e:04:67:df:13:80:9c:4b:65:68:
8e:a2:ba:bf:fd:3f:52:dc:b7:42:02:af:87:e8:3a:
39:ed:99:cb:0d:f7:ac:bf:21:46:b9:00:5b:28:91:
bd:61:5c:a3:6c:81:25:40:28:e2:ce:41:3a:64:91:
75:9e:ce:68:47:17:6a:3b:d8:94:68:2c:9f:63:4e:
26:5b:77:ea:40:cd:04:a8:d6:ce:be:54:a2:84:66:
00:b3:f0:c7:d8:97:12:b1:b7:04:ed:92:48:1d:2b:
0e:4f:ad:b1:14:77:94:9b:de:a4:40:40:6d:28:12:
71:ef:53:ba:c8:6c:35:b1:83:ca:a5:85:6e:8e:8d:
8d:5c:8d:7e:f4:72:f6:8a:50:62:aa:a8:07:2f:cb:
1e:38:ef:0b:92:b8:17:c4:28:93:b5:71:81:2c:61:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:2E:E4:9D:AD:16:EA:96:48:4D:16:E7:78:07:33:8F:8A:DA:A8
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8e:44:ad:9f:97:b5:15:82:47:13:11:df:1a:31:7e:a9:ef:
82:14:5f:78:72:91:44:d7:82:27:0d:c2:a8:32:13:b9:7d:c0:
e4:8b:b3:ba:c1:50:99:cd:26:d3:2c:0a:40:d8:bb:a4:fd:a7:
f1:21:75:e7:01:9a:e4:59:fe:cb:38:ae:e0:d3:54:2c:61:76:
a1:05:16:61:a1:ca:4f:67:8a:5b:a7:c0:39:a9:f2:8b:f7:93:
04:e5:41:12:22:dc:0b:d3:c0:90:bc:91:12:c2:20:37:ac:33:
8d:92:37:0a:02:b1:60:c8:10:6d:48:98:64:85:17:8c:1d:4d:
de:b0:1b:20:16:ac:f7:97:ec:62:b2:82:cf:bf:a4:37:10:95:
9a:ec:9d:fb:2f:88:03:4a:ce:cd:2a:d8:36:65:b0:1c:f1:7c:
35:67:8e:3b:7b:b1:c9:8c:0f:73:6c:48:4b:b9:58:bd:2a:02:
46:0d:79:bf:c7:b8:56:f8:fa:38:e3:1a:b5:32:8d:3f:a0:d2:
e0:c4:a0:6a:c5:3a:97:50:51:b0:e2:1f:e0:2b:88:6a:4a:d3:
71:46:d6:39:2d:3c:53:31:d2:62:9a:6e:d4:25:ce:b2:f2:4b:
dc:e2:79:ee:56:27:79:12:ac:93:26:c5:5a:7b:e3:e4:35:91:
43:58:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:44 2025 by rpki-client