Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
File: 971C513C022111EFBBBD7C47C4F9AE02.roa (raw, json)
Hash identifier: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=
Subject key identifier: 0D:B9:BF:08:C1:41:92:6A:B6:F2:2D:CE:50:C3:31:65:7B:51:84:0D
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0615
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
Signing time: Sat 10 Aug 2024 23:31:06 +0000
ROA not before: Sat 10 Aug 2024 23:31:06 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137076
IP address blocks: 103.8.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D
Validity
Not Before: Aug 10 23:31:06 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b7f83a-6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:37:0c:8e:54:a4:c3:db:b0:bb:d4:2b:0d:
54:23:16:cd:2e:74:51:7a:bd:48:5f:15:14:90:09:
ac:4c:05:78:d0:e8:35:dc:6e:da:af:e3:ed:51:b1:
c2:23:54:73:e0:41:00:ef:31:db:a9:3f:26:ba:54:
ed:09:03:4a:f4:d1:d8:b0:6f:be:e7:ef:f8:1b:7c:
6e:b7:13:8a:59:a5:e6:93:56:1d:37:0f:02:a1:d6:
4e:81:9c:6e:3f:20:d2:12:4b:58:05:b0:c0:34:d1:
ca:e1:9d:97:d7:60:bd:74:e3:77:5f:36:72:3b:6c:
a4:9c:41:e3:ea:a5:7b:5d:32:4f:3b:e6:a0:7e:01:
85:5c:95:d2:82:bb:61:cd:4c:b6:1c:39:61:ea:20:
92:8e:c7:7f:52:e5:93:88:12:82:19:0a:ca:14:5c:
f0:75:ea:af:34:d5:72:88:2d:df:92:b6:23:9e:2f:
87:d9:0a:ed:d9:23:2f:6b:05:db:34:01:e8:6e:1f:
c4:ab:ee:7d:1d:8c:96:76:5c:39:5a:df:c5:85:1b:
b7:cf:fa:f2:a4:72:de:a6:9a:16:9e:1a:10:a8:aa:
5c:cf:6f:8a:e3:59:75:48:dd:7e:68:ef:05:81:31:
b9:b6:c4:73:a7:de:14:46:80:a4:11:9a:1f:c5:53:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:BF:08:C1:41:92:6A:B6:F2:2D:CE:50:C3:31:65:7B:51:84:0D
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/971C513C022111EFBBBD7C47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1a:63:cf:51:dc:74:5f:52:91:14:63:a1:a8:45:52:45:8f:
f9:40:63:ae:02:58:a5:8a:f2:a7:07:5c:16:7c:30:b6:60:d0:
ad:ef:10:fe:bb:82:eb:51:e3:6c:bf:b9:66:60:23:cd:fc:e4:
55:42:c7:0b:0b:4a:a1:b3:96:59:89:e0:10:41:8e:38:86:4e:
a9:53:64:01:99:b0:e4:77:33:e3:a4:b3:33:fc:3d:d7:03:ed:
cd:05:ae:1e:2f:3c:3e:63:eb:87:d4:fb:7c:49:da:d6:5f:1e:
c2:2a:dc:5a:78:64:ba:3a:2f:ae:39:4f:7a:da:c3:70:df:03:
7a:fe:2f:20:04:be:93:13:8e:53:6c:68:1b:20:8f:4a:8c:d9:
4f:a7:1f:a5:df:55:50:d7:dc:43:bb:10:5e:b2:29:a3:80:00:
10:7c:05:e1:39:fc:0c:bb:7b:5f:85:c7:fc:96:60:98:cc:3a:
21:9b:8e:56:3e:84:57:c9:41:82:b4:11:91:2e:9e:a1:6c:3d:
d4:ae:aa:98:03:82:61:76:f5:f8:f4:90:1e:0b:1c:11:37:94:
54:27:78:6e:20:34:8c:2d:12:6f:f3:2b:0b:ee:79:46:47:a5:
13:b0:1d:3d:0c:98:da:10:0f:02:e9:0e:68:b1:23:80:3a:db:
e4:54:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:29:22 2025 by rpki-client