Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
File: 598E740E5A6011EDAF6FC679C4F9AE02.roa (raw, json)
Hash identifier: HL4pbC/iVl60jzP8PvY6wEjqTSd1XUG9dKyfATvV9ks=
Subject key identifier: 50:8D:25:3D:C9:5F:34:5C:9F:2E:CC:20:65:A5:5D:35:E8:97:AB:4F
Certificate issuer: /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial: 2530
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
Signing time: Tue 08 Oct 2024 16:03:18 +0000
ROA not before: Tue 08 Oct 2024 16:03:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 0
IP address blocks: 103.7.144.0/24 maxlen: 24
2001:de8:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9520 (0x2530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B28
Validity
Not Before: Oct 8 16:03:18 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670557c6-fd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:5d:1d:74:2d:a1:65:00:87:a6:60:d6:25:
be:a6:ff:e5:01:29:0f:5c:43:88:69:8d:5f:44:51:
c7:f4:42:b5:4c:2f:53:f8:f0:44:76:3b:d1:f2:d7:
9a:dd:1e:0f:80:37:4d:5f:43:74:cc:e8:c4:b4:0c:
15:f3:59:58:8a:d5:51:6b:04:bf:9e:f8:79:30:61:
e5:a7:6a:12:7f:c3:9b:e7:07:72:ad:72:68:4e:fe:
b6:da:31:38:62:d2:e7:9a:73:81:24:10:08:f6:e8:
52:0b:9b:c2:a9:6c:51:92:e8:1e:48:b5:08:b6:82:
68:45:23:f5:10:96:95:7e:b8:19:40:24:0e:7e:f2:
ff:f6:a2:2e:0e:c7:cd:8c:7b:a5:91:f1:4e:28:4c:
33:93:ad:29:93:2e:e6:87:65:5f:8b:b9:c6:0e:c1:
b8:78:47:92:d9:86:31:09:2f:76:eb:ed:75:db:73:
ef:d1:5c:f0:0f:94:ff:a4:5a:9b:2e:fa:c1:2b:95:
5c:50:f0:c7:0f:48:6e:d9:20:5a:51:3c:f6:ca:81:
cc:77:d1:35:f9:2c:8a:14:8b:82:02:5c:6f:15:0d:
d7:28:99:fb:8c:c1:dc:91:a1:65:f4:84:ec:ae:b5:
a4:f8:a1:49:f9:c2:6c:c4:68:c2:fa:57:bb:ba:c3:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:25:3D:C9:5F:34:5C:9F:2E:CC:20:65:A5:5D:35:E8:97:AB:4F
X509v3 Authority Key Identifier:
keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.144.0/24
IPv6:
2001:de8:1d::/48
Signature Algorithm: sha256WithRSAEncryption
79:52:2b:6b:8a:17:c6:dd:28:4f:77:a6:1e:a1:ea:74:d4:28:
35:44:a1:06:39:cd:77:73:2f:74:6d:d3:05:ab:6a:fd:74:22:
1e:79:5c:07:c4:3a:a5:dd:e0:69:b4:f2:6f:7e:29:b2:03:7c:
6c:5c:b9:40:ac:82:f7:16:47:f4:65:af:54:62:b8:a6:f3:ed:
99:d6:05:44:98:05:13:d8:09:47:60:88:5f:be:d0:ee:5e:37:
65:b3:ba:71:a0:cb:56:ac:31:86:1d:2d:c5:54:aa:db:23:ad:
34:7d:44:2f:f3:5e:59:d5:ee:39:25:4b:a6:5c:e2:b3:f0:18:
57:7a:ba:bf:79:3f:44:4b:a7:fe:bf:26:66:17:2f:c9:c8:e0:
75:73:32:4d:d0:98:1c:7d:f2:98:ba:01:9f:49:0a:fc:f7:5b:
35:3b:39:9e:af:1e:d1:e7:b2:55:24:d0:59:c4:c9:a5:7c:b6:
1c:7c:51:23:19:78:ef:00:6a:50:c0:b0:ee:09:6f:cd:a5:4e:
37:98:df:a3:fb:2d:19:84:00:2a:77:e7:26:51:94:ab:7a:13:
6f:13:6b:7c:bc:d2:39:e4:a1:9c:ec:ec:f2:4b:33:56:de:3c:
40:d7:22:30:e2:4c:57:5f:ce:21:b0:61:94:70:e0:47:10:27:
45:83:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:37:34 2025 by rpki-client