Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa
File: F0B87A62FC1711EBA835010DC4F9AE02.roa (raw, json)
Hash identifier: aswh5w4cWVhb4Gut39D4jhLci8TaAdFY4oNgRXl7mfI=
Subject key identifier: 99:EF:38:1C:A2:F1:ED:0B:93:52:A2:E9:94:80:13:84:02:32:1C:EC
Certificate issuer: /CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF
Certificate serial: 04C5
Authority key identifier: 30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa
Signing time: Thu 31 Oct 2024 23:52:41 +0000
ROA not before: Thu 31 Oct 2024 23:52:41 +0000
ROA not after: Sat 01 Mar 2025 00:00:00 +0000
asID: 142639
IP address blocks: 103.171.140.0/23 maxlen: 23
103.171.140.0/24 maxlen: 24
103.171.141.0/24 maxlen: 24
2001:df7:4980::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E337
Validity
Not Before: Oct 31 23:52:41 2024 GMT
Not After : Mar 1 00:00:00 2025 GMT
Subject: CN=67241849-bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:50:5c:0a:fd:4a:66:f8:2e:2f:22:6b:84:
dc:26:a7:7b:be:d0:7b:ab:30:06:26:bd:46:51:f6:
4b:81:64:3a:7e:d4:01:02:d0:e8:1d:30:24:3d:50:
bd:35:ee:41:1a:8c:c2:b7:e3:57:e6:bd:08:41:d5:
56:8f:3a:5e:52:d4:1d:fc:16:19:20:e7:62:5e:47:
06:87:d3:b5:6a:0a:77:87:80:60:02:b5:e8:65:c5:
c6:40:a3:4d:17:12:26:5d:d9:11:47:9b:48:56:a6:
a9:76:ab:12:e7:ef:01:70:6c:a2:20:cd:7b:60:09:
01:2a:1d:d6:a8:08:04:92:6d:dc:55:64:4b:fa:1f:
d2:b2:df:ed:cb:0a:93:a9:e4:0d:49:74:27:3e:53:
bc:23:c2:6b:41:89:c6:57:41:eb:0c:fc:ff:51:81:
8c:8a:75:98:36:5c:09:49:13:05:8a:49:59:fe:13:
0c:d0:27:b5:fa:e7:b1:96:39:d8:0b:ff:cd:a0:bb:
72:e4:c5:cd:0e:ef:1d:31:4c:70:65:4c:c2:2b:12:
f6:d2:1a:bf:7e:61:80:03:8d:65:d8:3a:2f:a2:0a:
ea:37:7f:3e:38:36:4a:71:ef:03:f0:eb:42:83:5f:
ec:cb:24:f3:ee:a6:c4:80:7e:84:43:42:cf:c4:20:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:38:1C:A2:F1:ED:0B:93:52:A2:E9:94:80:13:84:02:32:1C:EC
X509v3 Authority Key Identifier:
keyid:30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/F0B87A62FC1711EBA835010DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.140.0/23
IPv6:
2001:df7:4980::/48
Signature Algorithm: sha256WithRSAEncryption
cb:4b:a4:89:0f:69:73:3f:2d:58:5c:f8:6a:e7:2f:82:2c:46:
ae:d0:d4:5e:de:34:2d:65:81:4b:5c:45:13:9d:03:2c:a7:f0:
6a:98:7e:bc:84:82:2b:60:7b:9b:f1:a3:29:54:6a:21:c2:41:
49:6a:c7:7a:35:e7:e0:12:1d:7f:5b:b1:9d:b9:d4:aa:f7:05:
9f:5f:50:96:1a:0a:8a:87:e8:aa:db:3b:a7:d5:e3:fb:da:88:
bb:de:f1:b2:1d:1d:c5:eb:82:c8:2a:28:3a:c0:e5:f6:67:02:
bb:73:07:75:47:fb:f6:a3:1d:49:cd:f3:b2:31:21:b4:0a:8d:
b8:84:75:89:ed:50:1d:f5:4d:24:ab:8a:55:04:32:7c:a4:f6:
02:91:16:ae:cb:7c:9a:68:cd:d0:52:7a:be:9c:58:e5:5a:98:
d5:b2:7d:f2:b6:1b:6c:58:7d:a0:85:b6:e3:83:f0:dd:ea:f9:
6e:3c:a7:98:75:e9:f9:b8:5a:4a:6d:dc:ae:f2:fe:5c:6f:c7:
0b:af:52:6a:bd:7f:d6:86:ad:13:09:44:89:91:e8:93:59:69:
8d:33:86:3e:36:26:6a:fc:3c:d7:d9:fe:99:39:14:e1:10:d7:
ee:6b:92:49:81:43:b0:91:ba:cf:6b:98:fe:6b:f9:0e:8d:ef:
ad:a2:fa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:57 2025 by rpki-client