Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/1DFE0A801E4211ED82CEED40C4F9AE02.roa
File: 1DFE0A801E4211ED82CEED40C4F9AE02.roa (raw, json)
Hash identifier: IaKEMLHH7TpnUMP23vsjzKsi2qtWY17a/delPudkIiY=
Subject key identifier: 0C:9A:66:21:28:9E:B0:36:F3:78:FC:BD:48:83:91:57:62:E4:38:07
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 11C7
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/1DFE0A801E4211ED82CEED40C4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:35:29 +0000
ROA not before: Thu 28 Nov 2024 17:35:29 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 400618
IP address blocks: 103.102.4.0/22 maxlen: 24
182.255.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4551 (0x11c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4
Validity
Not Before: Nov 28 17:35:29 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748a9e0-fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:87:cc:36:b4:56:ae:77:7c:e5:0d:83:6e:
37:66:ee:9d:ab:94:98:df:78:92:9e:af:13:9e:fb:
33:9e:72:b2:b3:6c:e0:b3:80:1a:91:2d:3d:d2:0a:
8a:37:e7:20:14:44:10:58:ea:af:e8:96:bd:f0:e0:
dc:15:79:d0:22:69:94:9a:d5:0c:0a:de:25:8e:86:
60:49:b5:77:59:d8:ca:d6:79:64:c3:9f:99:bb:a0:
c4:2b:70:50:38:9d:04:18:c7:c9:a7:d2:fa:e3:1d:
e0:d9:57:fe:89:c0:58:13:e0:cd:02:8c:06:35:64:
b2:55:d1:7e:1b:9d:84:a8:1f:f9:8a:96:74:b7:5b:
cf:43:7d:82:2e:5b:83:69:cc:2b:c5:fa:12:e6:33:
cf:97:ec:c4:08:d1:da:e5:4e:9b:6b:eb:39:fb:b2:
5f:ff:6f:a1:a5:c3:16:1d:88:19:98:18:eb:8a:d5:
cf:c3:59:6a:9e:9b:d3:18:f3:7b:4d:cc:af:ce:46:
e5:2b:d7:ea:42:0d:db:60:1c:33:09:72:b9:46:ad:
f9:d1:b9:ca:b3:89:16:7e:a2:b1:3c:7f:8f:c4:30:
bb:c8:58:f0:a5:cc:6e:31:33:e5:48:73:c2:3e:26:
89:76:1e:c8:9e:57:da:12:d8:18:cc:48:a7:31:76:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:66:21:28:9E:B0:36:F3:78:FC:BD:48:83:91:57:62:E4:38:07
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/1DFE0A801E4211ED82CEED40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.4.0/22
182.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
af:3b:d7:07:46:f5:f3:12:84:b1:b1:dc:a5:81:20:89:a8:d1:
a5:1f:08:e2:c2:60:c9:71:30:14:30:1c:b9:99:17:f0:41:a8:
a5:23:3f:3a:a4:8c:37:fe:1c:69:0c:8c:df:bf:4f:3d:0b:1e:
c7:79:e2:6f:d0:51:b5:41:53:cc:2e:d3:a2:11:9d:a9:21:af:
fb:9f:ac:f9:c3:3b:9c:ec:b3:74:f0:e0:71:94:93:11:04:94:
4d:11:9c:66:66:cc:6b:25:40:9b:87:5d:22:e6:41:d8:cb:3b:
3f:30:30:9e:b7:41:68:74:cc:63:4a:bb:25:35:b3:6c:e2:f1:
1b:1a:59:07:15:13:d4:ea:53:81:a6:6d:12:24:9b:ab:44:26:
4a:ae:7b:05:06:38:d3:ed:61:a0:4d:ec:b5:bc:4c:f0:77:3e:
49:5c:3a:83:03:a0:88:3d:c2:7c:c7:84:10:da:5c:21:d7:12:
85:15:ba:c0:e5:60:fe:64:9f:aa:42:49:79:c7:d0:eb:97:20:
2f:c1:d6:e8:de:8d:10:3f:ae:40:01:77:4a:ab:ec:87:76:1f:
8b:da:23:8b:b6:26:f9:e9:9d:41:da:5f:94:0e:77:6b:49:23:
41:bf:29:b5:80:97:b4:a5:b0:2a:41:e5:fc:ef:a5:d9:68:26:
7f:58:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:44:22 2025 by rpki-client