Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa
File: 1295B5943FA611EF94664041C4F9AE02.roa (raw, json)
Hash identifier: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=
Subject key identifier: 23:CC:6F:11:0B:A4:22:38:31:C9:9B:65:B6:77:E9:44:1B:54:A6:69
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 0461
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa
Signing time: Tue 03 Dec 2024 00:14:30 +0000
ROA not before: Tue 03 Dec 2024 00:14:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141433
IP address blocks: 103.174.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC
Validity
Not Before: Dec 3 00:14:30 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e4d66-387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:2e:63:88:3c:b2:ca:e9:34:1c:f2:96:11:
a0:f6:2f:5a:0d:40:03:a2:02:4b:0f:9f:37:90:bc:
72:82:99:eb:95:cc:6f:33:e7:ad:e9:80:cc:9d:b5:
54:76:92:58:4a:11:41:5d:01:a2:bc:cc:aa:df:e5:
0f:80:d3:27:da:5a:1c:6c:c8:5e:f3:ea:90:9e:2f:
26:ef:ae:9f:8d:a4:56:1b:ae:60:40:eb:fd:48:ee:
99:db:28:aa:f4:45:90:bb:a1:a2:1e:6b:49:d6:de:
4e:96:1d:cc:f5:a4:3b:ec:3f:a7:c5:86:92:37:c0:
5c:7c:34:60:27:f2:b5:65:05:5f:cf:8f:72:93:fb:
7a:db:2e:63:5c:9f:03:8c:67:4c:6f:2a:16:b7:31:
7f:d6:10:8a:33:18:2e:b6:57:3a:d5:a7:0b:30:be:
c0:73:2d:4d:26:d0:a8:47:0e:c1:13:6c:c9:cd:09:
f0:f1:4a:b2:e4:ec:a1:d2:5e:06:80:7f:25:55:02:
c3:18:47:41:a0:ad:0c:33:8f:13:8f:58:dd:0c:9f:
90:3f:1a:1b:02:71:90:6d:8f:e9:55:77:b7:3b:0c:
70:f3:a6:7a:ad:18:9a:46:67:c7:ef:b2:dc:9c:6a:
f8:13:5a:b6:e7:fe:11:6a:0f:87:af:26:43:dc:b8:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:6F:11:0B:A4:22:38:31:C9:9B:65:B6:77:E9:44:1B:54:A6:69
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/1295B5943FA611EF94664041C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:72:53:4a:68:75:dc:9a:7c:b3:77:4d:c1:ca:fa:7e:fe:89:
6d:fa:bf:05:56:14:cf:c3:e7:ca:75:bb:0e:94:34:f2:12:2a:
9e:f0:71:59:45:bd:e6:a9:3e:2f:ac:37:45:0c:63:46:2e:6b:
4c:ec:07:52:01:a9:cb:33:da:e6:3d:c1:56:ba:13:8b:64:36:
68:08:4a:bc:e9:1f:b1:bc:41:c0:84:b2:67:f8:bc:bd:8d:d5:
1f:3d:81:65:79:23:f7:a6:a9:a1:72:57:2f:a7:e3:31:7f:62:
f6:9d:1f:80:50:23:26:a9:f0:cd:b1:4f:bf:0c:08:6a:0d:d9:
90:0b:8f:b7:47:1c:e1:cb:ab:df:9f:49:f4:68:24:90:55:93:
d4:16:88:f6:f8:ea:d3:8f:5e:06:78:c5:7c:e6:49:22:df:f6:
cd:93:a2:c7:00:c6:3d:92:94:8c:83:1f:57:ef:54:57:b5:f5:
f5:b5:88:96:0f:ba:f3:38:fc:5d:d9:12:34:24:a3:20:93:c2:
53:4e:49:72:89:5f:96:9f:d1:a4:24:bd:8c:b5:ba:57:97:d2:
24:f0:e2:4d:70:2b:8d:b2:2a:bd:e5:3a:62:c2:1b:e8:87:aa:
68:c5:0f:b1:79:19:70:15:78:e7:bf:8b:0f:3c:22:37:05:77:
49:89:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:17 2025 by rpki-client