Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
File: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (raw, json)
Hash identifier: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=
Subject key identifier: 47:9D:49:B7:25:22:EB:4C:B6:6C:32:F6:D9:D2:44:9A:F6:84:D3:B7
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 06A4
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
Signing time: Tue 03 Dec 2024 17:13:08 +0000
ROA not before: Tue 03 Dec 2024 17:13:08 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151330
IP address blocks: 103.152.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B
Validity
Not Before: Dec 3 17:13:08 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=674f3c24-308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:bd:2c:d8:3b:9b:8c:43:9b:f7:3b:ed:91:
23:2e:be:31:75:b8:96:65:68:5b:26:e1:17:58:b7:
20:e3:fd:c5:48:40:50:20:06:15:63:a9:a1:bb:81:
ea:2d:e3:24:5f:13:9e:8d:39:0a:e1:35:90:9d:c1:
b2:7c:f4:da:54:4f:d6:08:30:55:8e:01:51:68:2d:
29:43:80:ea:3c:f4:d8:80:56:9d:e9:72:b5:68:31:
83:7e:4b:db:cd:b2:48:20:03:e1:a6:6b:47:e3:09:
da:c3:0e:bb:ac:9f:34:6e:1b:43:4e:8b:43:85:89:
12:44:fc:e7:f3:f1:6b:de:e9:0d:42:e9:40:bd:9f:
bd:83:16:25:f8:9e:13:2d:24:da:fc:ae:10:a3:8f:
04:a3:ee:7e:7b:11:a9:d4:79:a3:53:9e:32:13:ba:
78:51:db:a0:62:0c:0f:f0:c2:35:34:75:7b:8a:24:
5c:59:9d:a0:db:5b:9f:c0:0a:2b:2a:34:4f:c0:a2:
ff:82:b1:10:f5:1b:7a:32:70:6b:0b:89:d9:2a:25:
f1:db:8b:fe:db:ab:68:b0:ff:f7:ab:ee:62:ee:60:
49:c2:a5:d0:58:62:34:60:a7:77:df:c2:ac:24:ff:
1a:7d:1c:4e:d1:4f:53:d9:b6:6b:a9:a8:50:a3:e5:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:49:B7:25:22:EB:4C:B6:6C:32:F6:D9:D2:44:9A:F6:84:D3:B7
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:5f:88:c6:d9:b8:80:87:1b:4d:4a:29:9f:41:e0:89:f6:36:
10:42:7a:4b:c7:54:6e:91:87:2a:ed:90:62:f4:ac:eb:cb:d1:
5c:e4:b8:98:6d:81:5f:a2:21:57:d1:07:04:81:67:05:08:3a:
f7:eb:dd:f1:fc:7e:9c:b9:65:18:ef:43:16:8d:b9:41:8b:af:
e7:be:ab:53:04:cd:46:f9:22:25:b5:c2:10:9d:9f:85:af:4b:
a5:e2:a7:d0:e6:ea:cc:22:ba:86:9c:76:3e:50:9c:1e:6e:3e:
a5:44:89:c4:94:42:b1:6d:5e:72:5d:7c:9d:ab:f1:46:d1:96:
c4:82:9a:1f:58:46:66:3c:8e:03:f2:09:7f:b7:90:d1:af:d8:
b9:15:9d:3f:a3:b8:7a:ba:27:60:36:b0:72:fb:af:5c:cc:07:
dc:4c:de:c5:48:3b:65:e7:1a:41:cf:51:cc:b2:65:58:df:73:
f4:1e:de:58:9e:fa:b7:56:80:b3:9e:6c:aa:52:60:72:c8:d7:
c4:16:49:9e:c8:86:26:f8:b1:87:f9:0b:51:e9:66:2e:ea:e8:
8a:9e:47:27:e5:66:c7:7a:c7:0f:0c:98:50:2f:0d:b9:96:e0:
f2:58:d9:62:e8:49:6e:c2:e5:0e:ea:df:e9:25:e2:ec:89:3a:
48:79:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:11 2025 by rpki-client