Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
File: 8811415A689011EEA00A095DC4F9AE02.roa (raw, json)
Hash identifier: 48IxGJOKYf3ZnCDbFIJG9Nq2PPMVrHXpX9958CHjNPk=
Subject key identifier: 32:39:11:EE:3B:E4:9A:5B:A8:74:FF:85:76:FE:FF:BB:12:0C:F3:18
Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0
Certificate serial: 77
Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
Signing time: Tue 30 Apr 2024 20:28:57 +0000
ROA not before: Tue 30 Apr 2024 20:28:57 +0000
ROA not after: Thu 29 Aug 2024 00:00:00 +0000
asID: 147303
IP address blocks: 103.110.162.0/24 maxlen: 24
103.110.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FA25
Validity
Not Before: Apr 30 20:28:57 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=66315488-8c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:0f:5c:3d:77:5f:60:b2:8b:01:7c:05:3f:
8f:d5:f4:77:cc:23:ac:59:10:17:4c:4c:72:77:cb:
29:2f:0c:ec:5e:fe:62:2a:92:bc:47:e9:23:e9:92:
f9:2e:11:bc:e5:2b:3e:29:b1:35:38:62:c4:e4:8b:
7c:6d:e1:ed:18:a0:55:cb:26:b1:dd:8d:55:ca:2e:
a2:29:0a:e0:78:32:c5:37:3c:a8:41:f9:b4:9c:82:
bb:6a:bc:ed:55:21:ab:8c:d3:5d:e8:a2:34:98:bc:
c4:0d:21:f5:fe:f9:93:c5:50:9e:58:cf:0d:5e:26:
7f:ba:27:8f:7b:d4:75:11:96:ee:98:f3:d1:f6:7f:
24:37:57:2d:fb:34:e6:27:fd:b1:59:ef:0f:70:18:
e6:77:b5:de:14:70:c8:56:f7:69:b1:79:55:16:25:
70:1f:35:4e:3a:af:3a:8a:da:58:31:c3:98:82:ed:
1a:61:79:b1:5b:01:bb:94:8e:91:2f:f7:06:62:72:
8d:19:45:66:c2:87:40:cb:f7:34:4a:38:3b:cc:2b:
b7:cf:9c:da:4e:7a:79:5d:4a:9d:a8:1a:b8:06:66:
4e:f2:f4:24:75:3f:e9:e3:76:e4:7f:b5:e8:4a:6b:
13:fd:17:d1:34:1b:20:2f:c9:e9:f2:51:b3:19:54:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:39:11:EE:3B:E4:9A:5B:A8:74:FF:85:76:FE:FF:BB:12:0C:F3:18
X509v3 Authority Key Identifier:
keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/8811415A689011EEA00A095DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.162.0/23
Signature Algorithm: sha256WithRSAEncryption
11:45:a3:fc:4d:78:c5:91:16:8e:99:a2:5f:47:35:3e:4c:82:
23:d8:3e:49:13:8b:6f:46:3a:c8:41:68:1b:0a:74:bd:97:49:
b6:6e:86:82:d2:36:72:10:c2:22:2e:7d:9f:fb:c9:41:1f:70:
de:a4:cd:1d:ef:30:62:3c:cb:78:75:eb:4e:09:f2:47:9b:93:
97:62:9f:59:35:a6:8f:d6:4d:85:40:00:5f:64:67:5d:b2:50:
1b:b7:b9:c5:ce:61:a4:81:6b:6f:c2:7b:07:6e:6a:4c:96:10:
af:15:48:c5:71:a5:ed:93:05:e1:d3:bb:55:e8:4a:0c:53:42:
a5:91:fb:a3:62:c1:6f:2a:3f:e4:43:b7:f3:e1:1c:12:55:4e:
85:e3:64:5c:57:6a:4c:69:63:75:da:76:d7:27:9a:f5:92:d6:
76:06:e9:28:01:cb:72:89:7a:5c:c8:78:c1:1f:e8:a6:c7:06:
17:83:b4:97:5a:ee:5e:46:11:f8:ba:29:39:9f:ef:17:26:5a:
85:83:74:9b:0a:6c:a6:b0:07:df:c0:57:14:11:91:3b:88:fb:
af:3f:1b:69:24:f4:4b:c9:07:04:06:25:24:42:28:a2:c2:31:
27:fb:67:19:50:8d:71:f8:bf:1b:6a:b6:5c:f3:bb:bf:73:63:
61:b5:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:07:01 2025 by rpki-client