Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
File: 6877A622A9DB11E9B353AF85C4F9AE02.roa (raw, json)
Hash identifier: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA=
Subject key identifier: B9:79:B5:F0:05:DA:7F:DA:28:F6:37:A7:AB:B1:CC:5C:BA:47:16:0C
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0D63
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
Signing time: Thu 06 Jun 2024 19:32:40 +0000
ROA not before: Thu 06 Jun 2024 19:32:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137818
IP address blocks: 103.114.198.0/23 maxlen: 23
103.114.198.0/24 maxlen: 24
103.114.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427 (0xd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71
Validity
Not Before: Jun 6 19:32:40 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66620ed8-cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:fa:09:97:e1:16:78:33:b6:73:61:c1:d5:
e8:21:4c:a4:73:4d:bd:e2:0e:56:59:a1:a2:d7:89:
b6:67:97:cf:32:53:b5:b1:da:5f:60:f9:a9:0a:ed:
d3:07:90:76:04:03:a5:e8:9d:a3:04:74:03:f0:51:
29:c7:b1:33:90:6d:19:0f:21:48:e4:df:1d:ef:b0:
71:d9:cf:8f:05:04:05:02:eb:e5:47:88:b5:ff:f9:
d5:25:12:84:1e:8c:b3:88:ae:5b:69:d0:5c:c3:83:
ca:48:6e:3d:d1:c0:72:4c:6c:99:81:54:9c:a3:a7:
74:af:37:ff:42:3f:83:f3:4d:8a:1c:45:a2:31:d0:
32:93:17:12:0e:34:44:48:cd:0f:b2:95:34:1c:aa:
80:04:bf:29:7f:a4:1f:07:d6:45:c8:10:de:65:b6:
85:5f:03:07:9e:da:6c:07:e6:e7:c1:6f:0d:ae:8e:
82:0d:af:a8:09:0e:be:34:7c:ae:cd:2f:94:31:20:
f0:d2:d5:b4:85:a9:77:6d:c9:33:2b:6f:8b:c1:45:
21:2a:0e:9c:a6:e2:56:90:e1:30:69:45:4b:ef:4d:
8a:cc:83:ee:f4:09:0a:cf:5d:20:c3:76:c8:07:ea:
06:95:22:b1:a2:a5:5c:a3:8b:0f:00:c7:34:d5:57:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:B5:F0:05:DA:7F:DA:28:F6:37:A7:AB:B1:CC:5C:BA:47:16:0C
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/6877A622A9DB11E9B353AF85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.198.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3d:f4:cc:93:ab:9f:a0:91:dd:44:be:b1:04:ce:a8:42:a4:
b5:de:0f:57:11:28:d8:9f:ae:be:6d:12:06:b6:a3:e0:18:74:
90:67:cf:44:22:fe:3c:45:19:c3:b0:d6:db:42:ff:4c:fb:a8:
a6:71:19:83:de:48:12:d8:b8:66:2f:ea:9e:44:93:a0:9c:14:
0e:86:fa:8b:d1:5b:03:93:35:5a:b1:39:3a:c5:fb:41:85:4b:
c4:4f:0a:8b:b9:26:8d:b2:ac:ae:3b:c0:b4:68:4f:d4:53:13:
7e:87:d7:52:e8:71:fc:4c:d0:ce:7c:29:e5:12:83:a7:9a:00:
8f:f3:22:cd:f3:47:dc:85:5e:63:d8:ba:1d:3f:df:db:d0:8b:
cf:fb:ee:e5:87:8a:0c:f7:30:e7:90:bd:6b:fd:b5:8e:d8:57:
7f:a6:64:af:79:69:49:b3:8e:b2:0d:8e:73:5e:ad:e5:4a:36:
6c:92:28:50:bc:27:ca:5e:d7:60:a3:d6:d5:7e:6b:dd:98:b8:
f5:72:c3:bd:3b:4e:02:33:8b:17:7b:98:b1:3a:e8:38:e7:8b:
62:e0:59:49:e1:6e:ec:89:9f:97:a3:97:bf:64:e2:da:28:77:
66:ec:cb:ed:a9:8d:de:e2:9d:22:cf:d8:9e:36:8d:86:4d:82:
36:9c:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:57:04 2025 by rpki-client