Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
File: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (raw, json)
Hash identifier: 1WkNyyyiFt1FW+4vq2oaXotjB9v8sAKNGelCyY+t8Uc=
Subject key identifier: EF:00:48:1E:81:0C:30:A0:1E:C2:1D:9C:41:9B:61:AA:17:BE:E8:92
Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial: 0287
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
Signing time: Sat 01 Jun 2024 05:03:45 +0000
ROA not before: Sat 01 Jun 2024 05:03:45 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 132372
IP address blocks: 103.186.116.0/24 maxlen: 24
103.186.117.0/24 maxlen: 24
2001:df0:a8c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB5F
Validity
Not Before: Jun 1 05:03:45 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665aabb0-49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:82:f2:c3:c8:a5:20:0e:5b:a2:f8:6c:e7:
e4:4e:ae:4f:47:b5:f5:cd:f6:7f:27:1e:e8:1a:50:
b1:d4:07:d8:82:ae:a0:40:77:9e:3e:e9:ce:19:02:
ca:c7:60:84:57:d4:ef:ee:db:58:c8:dc:15:c3:c6:
af:0e:3f:53:63:f0:ac:86:1c:53:81:f3:ef:52:1b:
03:1c:8f:1f:de:af:36:00:8c:74:6b:9d:74:6e:93:
69:c6:b5:a6:1a:da:48:f2:5b:0c:0d:25:a9:ff:5d:
2a:6a:9c:87:4b:ed:29:d3:e8:76:e0:1f:81:34:b2:
a3:aa:5a:67:25:ff:a1:1f:c7:3c:07:45:0b:e7:39:
fb:6f:7d:c7:70:e5:29:0e:20:a5:22:f0:2b:0b:d2:
c9:b1:90:b9:d0:22:11:62:46:64:50:14:cf:5a:5b:
52:12:fe:fe:92:f9:56:b2:d6:4a:65:2f:08:46:6d:
58:02:b2:fe:4a:e4:42:c1:8b:6a:53:8c:97:35:03:
af:f2:7a:e6:f7:60:2e:31:9b:15:b0:10:de:62:77:
38:fe:a1:7b:21:0a:13:1a:65:80:da:b3:78:a2:c8:
04:55:43:af:ed:56:0a:56:0b:ee:3b:c7:39:e3:9f:
e3:7e:ba:84:2c:cf:91:34:13:a4:f5:aa:60:04:39:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:48:1E:81:0C:30:A0:1E:C2:1D:9C:41:9B:61:AA:17:BE:E8:92
X509v3 Authority Key Identifier:
keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/688AF35CC09511EC8CFFDB10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.116.0/23
IPv6:
2001:df0:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7e:ef:2d:10:05:f9:e8:44:02:31:d7:c0:ec:b2:f7:c6:82:
bf:a2:a6:f8:b6:27:67:f0:cb:c6:89:83:05:70:3c:9f:62:30:
a6:36:5d:c0:15:c7:37:2e:8b:78:ff:d0:70:c2:2c:d0:99:6a:
5e:f7:ae:49:3e:ff:57:88:3d:4e:49:06:b2:c5:ab:fb:1d:db:
06:3e:b2:9e:7f:7b:ee:27:3c:5f:f0:6c:d0:18:b2:5f:7d:e9:
52:5d:80:80:3e:9c:85:bd:f5:af:cc:14:46:49:a9:3a:32:8a:
16:e8:97:71:a5:a1:c2:7d:60:bd:a9:4c:9f:53:29:fb:96:7e:
64:69:17:2d:b1:1f:54:d3:0b:41:df:f2:2f:cf:c1:5f:81:05:
4a:e0:e1:1e:8c:95:f1:55:ae:07:ef:3b:37:4e:f8:9f:79:63:
06:d6:b2:8a:05:86:d2:d0:b5:d0:d2:be:78:50:4e:85:28:bc:
4b:cd:11:67:8b:66:14:d1:2f:56:cf:7d:7d:ad:d6:b7:ea:a4:
e1:f8:70:da:fe:02:5a:a2:7b:d8:4d:55:1b:e0:1d:4b:99:bf:
52:54:d1:c3:2f:ec:bb:00:24:75:d4:2b:d3:e3:0f:88:25:59:
16:d1:75:74:c8:5d:bb:a8:68:a7:80:d4:58:e3:cc:25:06:0e:
88:cd:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:23:38 2025 by rpki-client