Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa
File: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (raw, json)
Hash identifier: 3IXJ2kT9nZjjXNHHgzGLrJIGKkUtdsBH6PxdM1Y97ec=
Subject key identifier: F5:79:33:C1:41:3D:D9:D7:B0:5A:BC:27:52:44:1F:F6:B2:5F:CE:6E
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 02E9
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa
Signing time: Wed 27 Nov 2024 01:35:04 +0000
ROA not before: Wed 27 Nov 2024 01:35:04 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 152461
IP address blocks: 103.40.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A
Validity
Not Before: Nov 27 01:35:04 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67467747-1f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:3e:44:b9:fd:73:13:c4:f9:a9:a3:51:b7:
a2:76:fc:3e:4a:1b:9d:03:81:ad:21:c1:ce:94:1e:
87:7e:0b:ab:ad:60:43:dd:41:5f:95:24:89:09:d5:
8a:b5:02:3b:3a:f7:13:60:c8:c4:47:e8:cf:37:b5:
6e:9f:dc:cc:21:3b:66:6c:5d:c0:79:db:fd:0c:e2:
12:7b:92:c0:32:b6:87:ce:c4:0b:a3:ee:b6:7d:b6:
43:d4:13:81:c8:74:6a:10:f9:91:de:cc:c6:06:ba:
36:79:63:83:d9:60:ce:1d:fc:77:8f:31:2f:be:bf:
62:1b:6c:b0:3d:b9:b7:6b:68:d1:25:3d:bf:d0:83:
43:39:c5:e2:0c:ab:38:b4:83:7b:5a:24:bf:44:5d:
87:4e:30:fd:ab:96:a9:5b:c8:18:e1:46:ee:e5:f1:
6b:a2:0c:6b:a4:1b:af:62:b0:f8:a1:f0:5c:a6:46:
e3:d1:03:a1:40:fc:bb:af:8a:a3:6e:93:d1:98:78:
d5:ba:03:fa:cb:9f:ab:be:1b:51:7b:c3:bf:6f:69:
01:13:b2:5f:da:36:1f:ae:13:5e:d0:91:1e:1c:b4:
ca:75:37:ad:18:f5:c3:41:40:d4:d7:88:69:36:69:
c1:f8:57:63:2e:5c:db:2c:89:2e:bf:02:38:04:5f:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:33:C1:41:3D:D9:D7:B0:5A:BC:27:52:44:1F:F6:B2:5F:CE:6E
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DF4500C268FA11EFB2CB6E60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:48:82:38:dc:99:20:26:ef:ea:d1:87:f5:4b:ea:5b:11:e9:
f0:32:b4:a0:03:d2:20:07:22:dd:6e:9c:f7:73:02:6c:62:cb:
e0:70:45:ac:c6:28:4f:88:d3:6a:d1:3a:b7:60:41:7e:da:7c:
58:fa:4b:e7:8d:6b:3e:d6:ee:fe:9f:33:db:57:e9:8d:ea:98:
a7:68:ef:4b:01:5f:b1:33:a9:55:1f:7d:95:b1:e6:61:49:3a:
8b:bc:d5:23:93:c4:f7:c5:c7:9e:b3:f1:8a:d2:ab:24:fd:b8:
6f:ab:96:2d:64:61:9d:3a:d8:cd:9d:73:cb:2e:a2:d9:1e:29:
d3:21:d1:7d:ef:13:e9:af:a4:00:47:67:ef:07:07:af:41:81:
89:eb:03:ba:f4:66:d2:72:25:9d:c9:43:20:c7:de:d8:9d:a2:
9a:64:8d:66:0e:a1:0c:fb:10:d7:b6:07:5f:9c:5a:d8:47:27:
0a:7c:92:23:4c:3f:56:33:ae:75:cf:89:bf:85:5e:79:d5:b8:
07:a2:47:96:5f:5b:65:62:d4:29:3a:85:76:a2:31:1e:97:53:
69:1b:ec:9e:90:e3:e1:65:4e:50:d1:3b:31:d9:77:c6:03:5d:
75:61:14:57:0a:5d:02:01:c3:75:e5:28:79:40:7f:93:cc:21:
a3:3d:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:26:39 2025 by rpki-client