Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa
File: 4A7F0102747811EAB3C2634EC4F9AE02.roa (raw, json)
Hash identifier: 1nP7wgiAU6ogCq9MB/uivojHlNVu46xfBAf9/7vfcJE=
Subject key identifier: EC:88:67:20:F4:30:AF:D0:8F:FC:9F:C2:74:D7:EF:F3:E4:BE:2D:F3
Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial: 09C0
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa
Signing time: Tue 31 Dec 2024 19:58:34 +0000
ROA not before: Tue 31 Dec 2024 19:58:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17819
IP address blocks: 103.103.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915203C
Validity
Not Before: Dec 31 19:58:34 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67744ce9-4ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:87:27:c2:27:e1:cb:60:9e:89:f4:14:b6:
1d:2e:d2:98:77:4c:8e:16:b3:6d:cd:4c:0f:37:fc:
b4:05:ad:a8:29:11:60:e7:00:bb:d0:28:dc:dd:48:
1b:e0:f9:33:b3:ec:f6:36:cc:34:ec:ba:51:3c:c7:
e9:b8:53:2c:9d:74:92:6d:77:d0:67:a0:ce:ca:be:
ef:9f:af:55:3f:04:0a:0d:b8:6f:11:3b:c3:d7:f2:
9f:2f:bd:73:6c:e7:17:38:3b:5d:de:e6:f9:15:49:
28:41:f7:ed:15:e7:0b:86:8c:7c:12:a4:6f:27:a9:
6e:6e:10:ae:6f:3a:e0:fa:d5:65:48:63:43:68:15:
c9:1b:39:04:8a:12:f5:04:ed:3b:1c:ca:84:09:32:
c1:b2:c0:db:2e:9b:53:8b:98:31:4e:06:a0:30:2c:
3a:3d:5d:d3:43:38:82:38:aa:34:cf:b1:71:9c:5f:
06:e9:91:8d:e5:29:97:29:ac:cb:94:5c:4e:2d:d8:
93:3e:a9:38:63:25:2b:75:b4:70:cd:a5:6a:3a:c6:
55:35:7a:58:00:97:dc:50:00:1f:39:dd:84:77:b9:
b1:ef:52:fb:df:06:a0:5c:5d:78:d1:7b:ed:cc:ae:
2e:7c:43:45:cc:23:e7:97:aa:5e:c7:8e:80:01:5f:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:67:20:F4:30:AF:D0:8F:FC:9F:C2:74:D7:EF:F3:E4:BE:2D:F3
X509v3 Authority Key Identifier:
keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/4A7F0102747811EAB3C2634EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.140.0/23
Signature Algorithm: sha256WithRSAEncryption
27:49:70:aa:6c:b6:ac:f9:41:28:b5:b2:56:5c:3f:a5:e1:1f:
be:e9:11:84:eb:33:66:11:6f:12:9d:43:17:70:e3:1a:4b:e5:
9b:7f:33:4a:df:11:c2:87:42:d9:bf:f3:31:0b:2d:71:71:ed:
3c:9b:c5:4d:b3:bb:6d:b3:73:2a:ad:33:dd:93:00:cd:b0:79:
70:c2:41:de:1d:a3:4f:85:bc:c2:4a:d9:11:3d:01:3c:85:e6:
2e:1c:59:6c:8d:3e:42:50:8f:0a:14:4d:a3:56:96:dc:13:98:
e2:ee:a3:f2:9d:c4:01:1e:8b:2a:28:f8:93:66:0f:97:44:35:
4f:7b:a1:dc:a7:5b:71:cb:e7:4a:1b:a4:87:7e:6e:8a:0f:78:
09:fc:54:06:5f:f7:93:13:e1:52:89:9d:bf:5a:86:86:9d:9c:
92:37:79:45:96:28:64:fc:15:1a:8a:10:2c:25:81:ed:39:ba:
7e:9e:ef:95:25:5c:01:d8:3a:dc:9f:2e:9d:1a:53:72:9b:22:
30:de:5b:87:30:6c:b3:b9:32:5a:fe:5f:5f:b1:93:73:5e:e5:
35:d8:1c:5d:4c:30:22:ce:b8:98:10:84:6d:7f:23:db:61:a3:
63:c9:7c:e6:00:ba:30:47:89:1e:5c:59:d1:c1:be:9d:f0:ba:
74:08:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:54:52 2025 by rpki-client