Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa
File: A033FFB4F7F511ECADEAB528C4F9AE02.roa (raw, json)
Hash identifier: AUauGFsDFbTkxG/ElUZSjeF53FqLNbIQuI1Fh9dzIQE=
Subject key identifier: 3E:41:22:1E:85:F2:1C:FC:AA:46:06:96:DC:69:99:12:EF:90:1A:14
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 020C
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa
Signing time: Mon 03 Jun 2024 05:21:34 +0000
ROA not before: Mon 03 Jun 2024 05:21:34 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149820
IP address blocks: 103.187.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21
Validity
Not Before: Jun 3 05:21:34 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665d52de-62f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:4a:51:28:09:76:43:b2:d7:7f:b1:cf:6c:
96:99:1d:03:4c:4a:f6:7d:7a:42:a4:d8:67:4f:56:
c3:40:1a:00:24:8d:59:88:fc:31:db:d5:e1:2f:73:
7e:2d:5b:3b:19:df:9e:9d:c9:8a:0b:b4:0b:84:e4:
37:66:e6:21:64:31:49:14:49:38:19:8f:85:5f:0f:
77:c7:73:ec:8e:54:ae:75:48:38:11:f3:3f:d9:4a:
e2:06:f3:a6:fb:9c:1b:17:ce:a6:67:a2:02:cc:ba:
78:ca:73:da:d8:77:e9:f8:9b:58:d9:9f:0c:57:98:
91:21:6a:89:79:84:49:99:6e:73:91:36:10:94:ea:
e7:ad:b1:f4:38:29:bb:93:16:32:c5:2d:31:28:86:
df:71:49:89:ff:be:d4:01:b9:42:5a:26:1b:03:ad:
80:5c:1a:41:16:5e:5e:05:3f:e5:6a:df:ab:78:c8:
cf:30:29:61:09:cf:16:88:16:50:2d:94:c2:36:ee:
08:3d:ab:49:6a:b9:cc:34:1a:98:72:c1:da:b8:38:
95:af:ce:dd:09:31:00:67:fc:6b:ca:55:3c:aa:ff:
7f:15:1d:c3:1e:ab:b4:82:a8:63:c5:9f:11:19:aa:
f6:0c:00:bb:fa:66:66:f6:c8:da:6e:48:b6:7b:d6:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:22:1E:85:F2:1C:FC:AA:46:06:96:DC:69:99:12:EF:90:1A:14
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b8:c2:3f:ec:82:35:d2:c5:cd:9f:b9:a1:1a:3d:33:f9:91:
ee:ca:f1:87:47:ea:f3:bd:1e:d6:94:39:46:2c:c8:03:13:3a:
ad:87:66:3e:06:e5:9a:61:fb:6b:fd:30:10:41:a9:75:0b:44:
b5:64:be:10:c3:fa:c4:bd:8b:56:0d:55:0c:c0:42:2e:f1:57:
7c:77:4e:d9:1c:5a:6a:f7:b8:fe:29:fc:e7:c7:fd:ba:23:e5:
0d:76:4f:a1:09:e7:a1:5e:a9:a4:cc:16:31:f6:d9:96:ee:4f:
93:2a:dd:0e:35:5e:4f:70:91:88:a5:c7:74:bc:0a:34:28:0d:
a4:1e:f7:dd:fe:2f:eb:c2:75:1f:35:1b:4e:82:27:64:cb:78:
8e:d9:2f:6d:44:73:d6:7f:35:00:58:15:2d:e0:ec:2c:7e:17:
fd:f1:23:64:4d:c2:89:89:45:1c:12:e0:ab:bf:62:c5:81:d2:
5d:9c:f6:55:69:28:81:66:7a:26:8d:ca:fa:e8:95:04:2b:1c:
a2:15:99:2a:5f:0f:7f:7a:36:1d:fd:82:d4:fa:a0:ac:88:db:
39:cd:92:ff:fc:ab:a6:7d:a7:10:a7:78:bc:84:a3:b3:92:02:
2b:1d:0e:8a:f5:b3:67:3e:fd:22:31:09:a7:3e:0e:9e:81:4b:
42:98:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:33 2025 by rpki-client