Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
File: 4D470362C55811EB981FA987C4F9AE02.roa (raw, json)
Hash identifier: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8=
Subject key identifier: 12:7B:F9:C9:3C:8F:82:CD:B5:3C:7E:97:A5:25:18:00:46:1B:EE:E3
Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial: 04F6
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
Signing time: Fri 03 May 2024 01:43:54 +0000
ROA not before: Fri 03 May 2024 01:43:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140072
IP address blocks: 103.166.172.0/23 maxlen: 24
2407:59c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F32
Validity
Not Before: May 3 01:43:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6634415a-dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:22:98:cb:29:a2:e7:7d:09:38:9e:59:3f:
92:63:29:a4:5f:4c:cb:1f:52:7c:ce:c2:4f:0d:c2:
63:4b:97:da:27:5d:bc:bb:22:67:61:6d:78:d5:11:
e0:d9:54:49:2f:9b:dc:fd:2f:8e:4d:00:34:a1:dd:
85:2a:e8:f1:a0:d0:a3:f2:e4:c1:b2:6d:b9:d6:5e:
b1:94:cf:84:b6:2e:8c:76:38:6f:58:34:ad:eb:5e:
6f:67:31:18:af:69:1f:b2:dc:3c:11:d3:d4:af:31:
61:b6:4c:b3:d9:35:59:25:c5:9b:45:00:9f:c0:02:
6a:be:6d:9a:38:cd:1f:a7:1c:ad:63:24:49:e6:02:
e1:c2:4e:b2:4e:b0:a5:2f:82:ed:3e:f8:68:8e:fd:
72:9e:65:de:87:6b:8c:72:89:3e:52:80:03:1a:de:
a7:e3:62:0c:94:78:56:6f:d5:8b:59:fc:b2:dd:8c:
61:10:54:b9:fd:f0:38:da:2d:9f:d6:a6:c3:d2:ea:
74:e7:4d:6f:ee:0c:6d:95:01:f6:7c:27:f6:58:f9:
da:00:44:51:f0:49:97:16:e6:4d:25:ee:2a:65:e0:
1d:f9:e4:eb:f4:e3:3a:03:b7:ab:c3:a8:52:3d:65:
d8:5f:7c:46:ea:a8:ab:31:55:3d:ef:c8:b0:13:64:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:F9:C9:3C:8F:82:CD:B5:3C:7E:97:A5:25:18:00:46:1B:EE:E3
X509v3 Authority Key Identifier:
keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/4D470362C55811EB981FA987C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
b7:0e:1c:74:a1:7b:6b:34:b9:83:5c:6a:8c:7b:fe:37:6e:08:
6c:5a:0a:2a:ac:b3:09:9a:f0:63:23:56:36:4c:a6:01:99:95:
8c:88:4a:da:c4:50:6c:0d:38:bd:3a:76:a4:7c:28:d3:c0:38:
7f:42:93:b0:2e:c1:6b:eb:14:8f:0d:4c:11:62:c2:d8:c7:f5:
12:3a:5b:53:5f:87:53:92:93:77:80:c5:7a:a5:6f:a9:34:af:
f0:a0:17:02:25:90:b4:17:0e:87:5c:bc:bc:eb:c7:c1:25:e0:
88:f5:89:f8:e7:57:bb:86:06:74:7b:46:04:c7:51:e3:9e:64:
e7:e0:2d:04:b7:7e:79:65:bb:f5:7c:38:0a:0b:b6:5f:2e:a9:
22:06:45:74:5a:50:aa:bf:f6:64:e2:e1:35:83:57:6b:f6:62:
44:c3:86:40:2b:95:a3:94:a6:fa:d3:4a:49:63:6d:45:40:64:
a2:58:48:3c:c4:1f:b4:d3:47:25:f1:17:01:f5:90:66:8b:bd:
12:71:14:a1:67:ab:09:17:e6:69:55:86:3f:3e:e3:82:92:d0:
17:73:0c:6e:f3:e8:5b:5d:40:bb:c4:34:ec:da:34:8a:4e:b0:
ce:48:00:64:23:e3:c0:8b:7b:9b:a5:26:a3:ee:12:c9:7a:2b:
7d:ed:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:18 2025 by rpki-client