Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/14AF42E4CDEC11EFADE51621C4F9AE02.roa
File: 14AF42E4CDEC11EFADE51621C4F9AE02.roa (raw, json)
Hash identifier: TbTmsRtsTuVXvy3szZ21qvCvdK65cdeGO0lCfvd67gg=
Subject key identifier: D1:CF:8E:4F:D1:0C:CB:EB:01:79:82:0A:56:6F:6B:E9:D7:7D:CC:EF
Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial: 04
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/14AF42E4CDEC11EFADE51621C4F9AE02.roa
Signing time: Sat 11 Jan 2025 03:26:23 +0000
ROA not before: Sat 11 Jan 2025 03:26:23 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140999
IP address blocks: 103.173.0.0/23 maxlen: 23
103.173.0.0/24 maxlen: 24
103.173.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138959
Validity
Not Before: Jan 11 03:26:23 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6781e4df-a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:0e:ce:18:00:4f:d7:2d:4f:42:40:b0:ed:
d4:59:db:f2:3c:ae:7c:61:3f:ce:81:bc:1b:7f:fb:
76:03:c7:20:11:85:03:09:94:5b:29:e2:a2:25:56:
a1:81:2c:1b:b9:b3:f0:c7:9e:3c:a0:51:0c:f7:dd:
bb:38:8e:fc:39:9a:88:5c:69:b0:61:8b:39:05:b0:
9f:99:15:42:1a:24:92:01:db:b3:b4:03:c8:6f:bd:
a8:cb:74:57:1e:b5:4b:26:9e:66:c7:cc:73:b4:a6:
4d:f2:6c:95:8e:6f:c3:b7:e9:49:b8:81:34:ca:75:
ca:e5:54:42:7b:79:8d:4b:9f:15:dd:23:6b:1f:86:
8a:24:2c:ca:1e:22:39:c5:4b:db:43:97:e7:a0:91:
97:73:2e:12:a9:0a:c5:d4:1e:bb:1f:20:07:74:cb:
e7:c1:a8:20:e0:3b:34:f6:c4:d2:95:9c:a8:68:b6:
0a:88:33:64:c3:a6:de:f1:e9:6e:76:0a:5b:26:d7:
5e:7a:1c:48:3a:bb:89:71:23:1a:f1:9a:06:83:bf:
98:5b:61:e9:78:43:e7:ac:ee:81:a6:af:ee:7d:ab:
a9:92:14:9c:d8:ff:c0:a9:81:9d:79:5d:7d:3d:4e:
06:c8:30:cf:8f:0a:26:aa:08:b5:4d:9c:9a:eb:bb:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:8E:4F:D1:0C:CB:EB:01:79:82:0A:56:6F:6B:E9:D7:7D:CC:EF
X509v3 Authority Key Identifier:
keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/14AF42E4CDEC11EFADE51621C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.0.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:fb:d4:00:5d:8d:2f:8d:bc:b9:0e:59:13:9a:e4:86:dd:c8:
f2:a7:fa:5c:e8:ad:cc:37:5d:cf:ff:fc:6e:4b:84:56:8a:77:
3b:01:8c:e5:9f:5c:23:05:c2:0f:6b:87:1f:87:d6:7d:b0:5d:
7a:eb:b7:09:8c:c2:fb:73:1c:88:93:71:89:50:d8:fe:89:6f:
2b:b8:12:bc:dc:22:64:50:d4:20:83:b9:e6:3e:33:95:b8:ec:
91:64:86:af:50:01:eb:13:a9:1a:11:e1:f8:e1:d8:bd:34:4d:
2a:a2:f8:80:71:c0:ab:87:10:6f:8c:d7:fb:14:c8:ab:98:77:
3a:34:a9:f5:f0:18:d8:92:d6:32:49:7c:ab:2e:c7:b3:06:0b:
5d:9a:10:7f:4a:24:ed:87:a4:ce:74:39:07:b5:14:39:e8:50:
97:05:16:f9:0b:f0:dc:ef:60:b1:d7:3d:84:7f:15:7a:19:7b:
2c:ae:4d:4e:79:07:f1:3e:75:74:75:1c:56:fc:0e:e7:c1:60:
18:73:0f:e1:ed:bc:3e:b5:db:27:57:12:8b:a6:ea:00:da:d4:
8f:27:63:40:b4:25:80:98:5b:9d:ca:cb:27:2c:eb:ad:a2:9a:
c9:a3:47:e7:f6:99:fa:36:c6:fd:1e:8e:43:f2:cb:88:65:10:
96:5c:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:54 2025 by rpki-client