Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/C52B4E0A3FE011EF88794913C4F9AE02.roa
File: C52B4E0A3FE011EF88794913C4F9AE02.roa (raw, json)
Hash identifier: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=
Subject key identifier: 6A:C0:5A:50:95:ED:DE:37:5F:D2:B1:88:8F:95:94:3F:E2:83:4D:06
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 0462
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/C52B4E0A3FE011EF88794913C4F9AE02.roa
Signing time: Tue 03 Dec 2024 00:14:31 +0000
ROA not before: Tue 03 Dec 2024 00:14:31 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 147307
IP address blocks: 103.174.188.0/24 maxlen: 24
2001:df7:d180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC
Validity
Not Before: Dec 3 00:14:31 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e4d66-9386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:83:f5:44:ce:16:0e:89:8b:b0:a0:d7:d2:
0f:54:f3:c2:a9:3c:56:0d:49:59:b5:09:75:5f:22:
0d:0d:6b:6d:27:34:38:7c:b9:a7:96:86:2d:09:d8:
af:bd:bf:9f:2f:57:6c:ce:a9:79:66:c5:49:f9:8a:
a8:e7:6e:17:af:51:fa:da:66:76:41:97:a2:34:e5:
c2:ee:da:04:7d:cc:cc:97:7a:60:25:7c:2d:82:75:
9c:31:43:7b:58:9d:00:55:2c:4d:53:bc:a5:57:1f:
44:4d:d8:5a:0b:9a:bc:d1:c0:89:29:26:28:88:1e:
98:45:e0:1e:c9:74:a4:9d:d2:9b:66:72:2b:e6:c7:
7e:59:fc:d3:d6:76:33:ce:47:71:cd:5b:5e:9f:59:
64:a1:76:4e:57:d2:f4:c0:a9:52:a9:0d:ed:c1:99:
40:eb:fa:1e:e2:3c:49:95:5d:92:5c:a9:55:ee:33:
b4:e2:e3:f3:79:a0:37:41:6f:d2:74:4f:d5:c8:cd:
df:45:bd:b3:c0:54:05:55:76:e6:29:4e:86:c0:38:
84:3a:27:22:d5:ef:5d:dc:a5:8d:06:a8:cd:f7:ab:
9a:85:b8:39:e3:50:90:c2:1e:f9:c0:e3:33:f8:37:
1d:c0:73:57:3e:fe:52:e7:49:b7:22:9d:f8:97:50:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:5A:50:95:ED:DE:37:5F:D2:B1:88:8F:95:94:3F:E2:83:4D:06
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/C52B4E0A3FE011EF88794913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.188.0/24
IPv6:
2001:df7:d180::/48
Signature Algorithm: sha256WithRSAEncryption
15:72:43:a6:b9:63:84:c4:a2:3c:08:8d:f0:1c:8e:10:1f:2f:
0b:96:72:af:1a:7f:23:3e:0a:80:5e:26:d1:fb:64:ef:90:6c:
13:fa:2f:e0:8d:a6:60:8b:c0:04:d7:8f:90:a2:f0:0b:c5:16:
db:b7:20:21:f1:76:82:b6:78:6c:72:12:57:08:0f:30:b5:67:
f8:3f:14:65:5e:90:85:96:04:c2:a2:88:5b:40:1d:d5:54:f1:
b1:01:fb:7e:2d:72:5b:8b:5c:19:a4:96:e1:d4:45:72:81:9e:
52:f9:6b:c7:b2:54:1a:2b:90:58:a5:90:b4:04:aa:dd:ad:21:
a5:61:af:fb:ac:a8:71:fc:ee:18:9f:86:e4:5e:a5:cf:bc:34:
91:51:74:59:99:25:87:58:00:c1:69:2d:2d:62:55:36:d9:c3:
46:3d:82:b9:3a:9f:90:b2:6d:45:f3:86:5b:80:9e:87:98:7f:
bc:6d:81:55:bf:e5:f3:33:37:7f:a6:4d:e1:2c:97:86:84:f3:
e8:33:9e:9a:11:57:c1:e2:3c:5d:d9:3b:9c:2c:6d:18:ee:b6:
d0:83:88:a3:a8:61:0c:07:d1:d9:c5:e5:0a:74:30:a7:1d:d7:
0d:b8:31:18:c4:3b:93:07:52:44:bb:8e:36:43:d6:30:05:c4:
bc:0b:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:10 2025 by rpki-client