Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
File: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (raw, json)
Hash identifier: Ff3/yMR0vWErszLBIPlNKjSAb7MzXOTFYgb7mDfdJMY=
Subject key identifier: 32:67:5F:9A:AA:34:FF:24:53:14:2B:6F:7D:01:C7:8B:99:65:DF:E6
Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Certificate serial: 0CE1
Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
Signing time: Thu 08 Aug 2024 18:26:25 +0000
ROA not before: Thu 08 Aug 2024 18:26:25 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 24382
IP address blocks: 103.141.66.0/23 maxlen: 24
2001:df0:f380::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617E
Validity
Not Before: Aug 8 18:26:25 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b50dd1-5858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:3e:cd:b1:fc:09:a7:35:dd:58:cb:78:c0:
dd:e8:02:48:d4:81:0d:ed:92:54:4e:40:4b:9f:61:
b5:f3:2d:4a:85:fb:f3:0b:10:62:20:2f:c5:b6:d1:
5c:fe:1c:de:6e:92:7e:b8:80:20:a7:28:a9:6d:ad:
35:e2:4a:06:f8:c6:b8:44:93:5b:d0:cc:79:d0:79:
a1:92:69:5a:09:8c:12:bd:4a:c5:4f:25:0a:bb:83:
4d:5c:08:38:aa:5d:a4:58:be:74:ac:43:26:be:ea:
7f:74:f4:c5:9a:d0:44:bf:c3:d7:32:7f:12:67:d6:
95:61:f6:7e:e0:aa:b8:6f:88:2c:ae:ad:f5:eb:93:
8e:20:28:2d:c4:de:7e:e5:9d:33:7c:0b:a4:93:84:
81:43:76:8c:46:60:f5:65:47:5f:82:65:32:b4:9d:
e1:a3:0d:56:3d:51:02:22:9f:36:c9:96:5a:be:26:
cc:a9:47:1a:3a:68:6f:82:15:c1:67:11:98:3e:9f:
ed:f9:74:3d:e4:5c:ea:ff:7d:59:20:f0:89:8b:f1:
da:45:e0:8c:94:10:78:b5:3b:8b:23:02:6f:ca:9d:
6e:82:e1:36:bc:1c:90:27:52:e4:21:65:55:75:1c:
33:14:48:ea:53:1d:1f:02:f5:ba:d5:c3:ba:f2:cf:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:5F:9A:AA:34:FF:24:53:14:2B:6F:7D:01:C7:8B:99:65:DF:E6
X509v3 Authority Key Identifier:
keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.66.0/23
IPv6:
2001:df0:f380::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e1:9c:07:1e:44:9b:13:b9:bf:2b:71:f9:01:92:8c:34:7f:
50:07:6c:9c:02:3c:e6:80:ce:67:43:a3:0c:99:b6:fc:c8:43:
4a:0a:3c:ef:c9:de:0f:b9:92:b2:c1:db:19:01:73:61:92:db:
2d:36:1b:0d:e7:2d:2d:cc:75:32:36:ea:94:c4:b5:d1:00:20:
48:cf:21:74:cc:b8:90:d2:5d:fc:a8:ed:ad:e4:a8:c3:a0:65:
0a:05:d1:88:a7:db:f4:d0:4e:73:c0:d3:66:06:7d:df:1d:0b:
eb:c3:bd:b4:4c:bc:b5:ce:ad:fe:ef:61:7f:37:84:2e:96:dc:
ff:4a:1c:b6:71:aa:6f:1c:c3:84:cc:71:73:dd:1f:a8:05:be:
48:46:70:a0:07:e1:65:21:46:fc:cc:86:2d:6d:ae:ed:fb:08:
8a:f6:fd:06:3c:78:66:28:a4:3a:e4:51:4a:1d:46:49:fe:54:
90:5e:27:5e:83:ef:3a:bb:5f:e0:1a:3e:13:a6:90:36:8b:44:
6f:d4:76:c7:86:08:f5:40:d7:91:1f:ad:be:f2:2d:d4:e9:dd:
44:01:e0:b0:47:2d:10:cb:c6:ff:e0:7a:4d:e0:f5:c7:9b:61:
5b:2f:8f:ab:c0:46:fa:89:3f:7e:88:cd:2c:4d:a7:0c:e0:e8:
c5:b0:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:56:28 2025 by rpki-client