Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa
File: 4720EB9ED60F11EFA2510540C4F9AE02.roa (raw, json)
Hash identifier: EAQQ09z+nA9+id2uzvp7qGBYO8lplKrap01lCURty1I=
Subject key identifier: D3:4B:DB:D8:ED:A0:B6:6C:EF:C9:A5:61:EA:81:FB:7A:67:73:A7:C4
Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial: 02
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa
Signing time: Sun 19 Jan 2025 02:44:18 +0000
ROA not before: Sun 19 Jan 2025 02:44:18 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133394
IP address blocks: 103.226.53.0/24 maxlen: 24
103.239.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914459D
Validity
Not Before: Jan 19 02:44:18 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=678c6702-5cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:32:cc:1b:c0:2f:e8:ff:11:ad:f9:41:6c:
b8:f2:37:df:5c:15:1e:aa:89:75:db:97:67:d1:6f:
88:4f:33:7d:b6:87:43:d8:25:0b:13:ee:1e:ac:64:
9c:6a:44:f6:2c:b7:21:79:f6:56:c8:ba:da:56:19:
08:40:ab:98:9c:99:91:41:8b:e9:9b:a9:f6:e0:41:
15:84:75:b7:55:d6:4a:05:de:8f:28:be:e0:5a:3e:
70:63:39:d7:a7:32:62:01:99:ef:d9:20:08:90:5d:
b5:21:22:7d:6c:54:76:4a:52:d3:67:10:4a:b3:99:
6f:8d:da:7d:c3:14:0b:7c:a9:a1:a7:21:75:9e:66:
d7:b4:d0:2b:20:02:bd:aa:11:ab:6b:8b:2a:5d:e3:
eb:71:db:14:9c:9e:ed:95:c2:c2:14:d5:0a:e0:28:
74:a7:46:ac:30:22:65:6a:57:2f:19:f6:ba:d6:c6:
bb:48:dd:4c:92:bf:9e:ab:e2:90:87:d8:d5:30:3c:
b8:33:bc:68:48:40:f3:77:be:38:a7:fc:37:55:0f:
a3:75:60:4b:db:7e:0a:66:b5:6f:64:26:50:aa:7e:
96:fb:bb:e4:8a:19:c9:53:ae:b1:8d:41:ad:41:50:
b5:f2:37:8a:3f:a5:59:0a:e5:d8:e8:cb:cd:12:58:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:DB:D8:ED:A0:B6:6C:EF:C9:A5:61:EA:81:FB:7A:67:73:A7:C4
X509v3 Authority Key Identifier:
keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.53.0/24
103.239.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:81:e1:47:5b:4c:58:4a:a7:f7:8c:dc:e1:a1:1b:20:8f:b7:
b1:e2:fa:73:5b:0e:6a:85:de:71:49:37:18:da:a5:be:17:eb:
91:df:38:79:ae:83:9c:57:36:f8:94:e5:0b:a7:6a:2a:38:f9:
54:c8:c8:0d:aa:4f:81:e2:a9:cb:79:68:37:8f:83:74:b9:c6:
f5:8f:26:f0:36:bf:b2:9a:16:e1:c0:83:98:d8:a9:18:c2:d9:
d3:59:da:d0:ce:69:8a:10:a0:4b:79:8c:b9:5e:88:19:f7:ee:
75:37:1a:aa:0e:6c:f5:35:5c:c6:2d:b0:47:1b:4e:26:33:17:
d4:fe:0b:da:ba:eb:76:cc:2c:70:9b:a4:0a:82:48:d7:16:b6:
31:c5:af:42:bf:a8:5f:5e:9c:df:e6:74:4d:98:c3:0e:d7:04:
25:d5:86:4c:f1:26:f3:cd:0f:d6:85:e4:ce:91:2b:a3:8e:94:
33:15:c3:85:fb:da:34:b7:2b:a1:c3:c1:21:58:0e:20:c7:87:
c7:90:2d:53:c1:65:c8:67:c8:c7:32:5d:3c:5b:4e:c3:b7:f9:
00:19:0e:55:42:6d:b5:69:c6:ff:15:00:b7:49:e0:ab:1f:22:
99:9d:d3:54:ec:a6:b0:59:28:a3:53:00:a4:a9:3f:8a:5d:1e:
65:f6:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:19:40 2025 by rpki-client