Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C0097A027AC811EDAE44E656C4F9AE02.roa
File: C0097A027AC811EDAE44E656C4F9AE02.roa (raw, json)
Hash identifier: Ua80tbmNWnIQYsTD9wFWhJahmdlpHa7n+CbRaiDeM5I=
Subject key identifier: F3:1E:02:54:B1:F3:C2:AE:4C:A8:DA:56:EF:58:3A:CE:22:94:91:19
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 349E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C0097A027AC811EDAE44E656C4F9AE02.roa
Signing time: Mon 31 Jul 2023 14:30:21 +0000
ROA not before: Mon 31 Jul 2023 14:30:21 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 14618
IP address blocks: 103.104.86.0/24 maxlen: 24
211.44.103.0/24 maxlen: 24
223.39.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13470 (0x349e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E
Validity
Not Before: Jul 31 14:30:21 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c7c57d-09b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:36:36:52:b7:fc:50:47:8f:3c:95:91:1c:
1d:dd:8f:a1:e2:a4:8a:a1:94:ef:ce:83:ec:fb:a2:
6c:96:e2:f8:b8:57:76:1c:4f:3c:f2:d4:f4:fb:2b:
e7:c2:4f:55:21:a5:7d:5e:6b:b5:37:a3:78:5c:48:
a8:06:51:b0:12:e3:d5:2a:47:e6:4b:00:67:98:5b:
db:d8:86:ba:fe:5f:79:a9:0b:f1:11:b7:bf:25:79:
e0:11:ca:35:3d:ff:3f:b3:05:89:c3:76:c5:49:46:
68:11:61:57:f2:a1:fd:71:ef:cb:d1:ed:97:46:4f:
ad:1d:49:40:12:f7:72:c7:bf:83:10:a1:a4:49:f8:
57:57:55:fb:74:1a:6b:35:aa:0b:95:24:90:15:d2:
73:de:3f:0e:3a:60:a4:3a:9d:a4:aa:ec:51:66:97:
84:7b:43:55:d3:33:8f:75:87:02:1a:7e:20:af:71:
fb:9a:8a:70:5d:fa:34:ea:78:53:33:8e:3e:61:77:
3b:e4:e6:d4:4f:70:b4:b6:36:3c:96:a4:95:51:3a:
93:de:c1:0f:9f:92:9c:35:0d:21:11:09:ac:6a:7b:
15:85:1f:07:47:02:db:86:ec:4f:20:e7:0b:11:be:
e2:f7:dc:dd:3d:b0:e2:1a:e2:b8:5e:9c:2d:02:43:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:02:54:B1:F3:C2:AE:4C:A8:DA:56:EF:58:3A:CE:22:94:91:19
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/C0097A027AC811EDAE44E656C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.86.0/24
211.44.103.0/24
223.39.18.0/24
Signature Algorithm: sha256WithRSAEncryption
30:68:41:11:e8:b9:64:7a:ce:4b:23:32:d6:89:1a:94:1b:cb:
a9:75:98:86:23:58:d7:98:df:dd:42:a7:2d:bd:f4:27:1e:15:
a4:f2:60:1a:cc:9d:55:f9:d3:3b:20:47:e3:5c:3a:79:fa:56:
4b:28:4f:d8:e3:96:ec:b0:53:12:e1:d0:6c:10:57:1a:38:5f:
39:20:85:18:af:5e:66:dc:20:3b:66:9b:f2:44:2c:93:48:73:
ca:16:c8:9d:7e:7e:43:13:db:b9:fa:c4:15:fe:8b:2e:e6:87:
ba:a5:2f:36:95:73:b4:e2:1c:6b:4b:a6:d9:79:a2:8e:d2:ac:
77:27:80:fb:39:5b:13:77:70:09:2a:81:56:bc:af:8f:49:71:
74:a4:4a:43:a1:d4:e8:a6:35:42:96:e9:9d:2a:ab:7b:00:bc:
b3:d8:9e:82:81:47:9d:dd:17:4b:40:46:ae:7c:6f:a9:7a:33:
6b:85:ec:ef:e9:1b:89:5d:11:36:3d:a0:00:2a:fe:43:5b:af:
4a:2f:bc:78:f4:64:b7:4a:37:52:d1:e0:32:6f:32:a9:1a:1d:
90:a9:71:1f:db:c4:cc:22:9b:cc:4f:da:e1:f6:25:f5:9c:2c:
f9:4d:0d:3f:6a:bb:c0:b2:e8:11:0b:c5:87:e1:07:e1:77:4d:
e3:bb:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:57:27 2025 by rpki-client