Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
File: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (raw, json)
Hash identifier: T3FHkQFBnR1D7G7E+6iXElBbCR/lDFKEW2aPMQWoc4I=
Subject key identifier: 3D:1A:3F:62:5F:55:27:51:8D:A6:88:32:1B:BE:C3:F4:7E:CD:76:58
Certificate issuer: /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial: 06
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
Signing time: Wed 10 Apr 2024 09:03:16 +0000
ROA not before: Wed 10 Apr 2024 09:03:16 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152684
IP address blocks: 103.129.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915308F
Validity
Not Before: Apr 10 09:03:16 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=661655d4-c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:81:f0:be:c8:8b:b3:4a:0f:fd:e0:eb:fb:
de:9f:a4:5d:09:57:92:e4:78:f1:c9:9f:3d:df:f3:
6f:d6:1c:31:86:3a:65:41:d1:da:13:30:78:76:7f:
2e:17:4d:86:3e:e6:f6:83:d2:cd:f9:fc:a8:64:31:
c1:be:61:d8:2a:3d:54:38:d1:7b:b1:ca:64:2d:04:
3f:19:a2:5e:78:3e:01:4a:16:42:f5:16:21:e6:e0:
06:83:df:53:0f:60:3e:bc:ba:2c:e1:37:7b:d9:ad:
0d:bb:b8:b0:75:01:1d:af:6f:75:c7:40:05:04:16:
14:26:dc:ae:bf:f6:e8:54:5c:90:c1:a5:2f:93:24:
ac:9c:66:a0:0d:f7:d8:50:41:ff:0d:27:8e:2f:27:
7f:27:a7:0c:12:9f:b7:0f:ca:f9:2e:10:30:3c:90:
99:f2:4b:5c:a2:e8:28:cb:d8:f2:d6:a9:77:58:5d:
e0:3b:e3:2b:44:8e:4d:fe:e2:43:7c:23:63:a3:ba:
7e:bd:a0:ff:a8:b5:a9:dc:41:e3:4d:f3:ed:0a:3a:
2e:44:bc:89:cc:ba:f4:fc:96:fb:3b:e2:74:dd:b0:
e4:8f:11:5c:92:b7:29:a6:6d:6d:65:6e:e0:a5:7e:
d8:ad:a6:6e:c6:14:0b:ca:fe:17:dc:2e:f4:4b:1a:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:3F:62:5F:55:27:51:8D:A6:88:32:1B:BE:C3:F4:7E:CD:76:58
X509v3 Authority Key Identifier:
keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/2AF6426EF71911EE82FD6B0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:e0:aa:82:a0:dd:a0:2f:c8:97:1e:f3:44:0e:ba:76:aa:a3:
ad:55:ab:68:0e:4f:62:8a:23:61:5e:c8:5b:93:08:12:e9:94:
eb:8d:f1:a1:3b:01:2b:0c:94:81:01:9d:6f:a7:23:c6:d0:8e:
19:8e:5b:b9:e7:70:8a:41:c9:27:fa:45:f1:08:53:e9:2d:4d:
48:65:a6:5b:8e:74:1c:0f:ed:f6:b7:12:d8:48:10:35:bd:c8:
a9:ba:da:78:3e:a4:c7:b8:71:4e:03:b2:3c:23:5e:f7:1a:5c:
60:0a:df:10:74:d2:4a:7c:8a:c0:5e:77:2b:e0:fb:51:df:f9:
f6:d2:62:76:ea:92:7d:8d:18:ea:91:0c:47:c5:6d:da:75:f1:
f4:a1:c0:fb:b5:87:c3:e7:61:93:f3:c8:95:24:80:90:ff:c2:
75:36:6f:7a:83:74:02:e4:eb:7f:ee:1c:16:ad:25:15:f4:29:
b9:b5:73:99:68:b7:45:9c:6a:09:cb:13:ff:01:13:a7:28:62:
d1:62:d9:ce:f9:8e:a4:c1:62:bf:fb:8d:cd:96:11:bf:32:07:
eb:0b:05:86:a7:65:df:6e:d8:09:fa:5c:4c:e9:39:48:81:36:
8f:29:3c:85:c6:0c:1b:08:45:71:1c:26:1d:99:50:ea:1a:c5:
e0:a0:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:55:06 2025 by rpki-client