Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
File: 47A72A7441ED11EC9B02377AC4F9AE02.roa (raw, json)
Hash identifier: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=
Subject key identifier: 42:A9:81:27:9E:2E:09:86:33:6B:F7:10:95:C9:3A:B2:CD:DB:D8:5E
Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial: 041E
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
Signing time: Sun 17 Nov 2024 00:03:25 +0000
ROA not before: Sun 17 Nov 2024 00:03:25 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139065
IP address blocks: 103.174.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054 (0x41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A39E
Validity
Not Before: Nov 17 00:03:25 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=673932cd-5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:a8:09:99:96:93:1d:42:ef:20:29:d6:0c:
51:8b:2c:87:26:77:49:4b:2f:95:7f:3c:12:7f:52:
58:2b:33:8d:7a:db:f6:bd:78:bd:f0:13:1f:f0:dd:
81:2c:f3:d0:e1:3a:af:72:a3:02:20:7c:c7:56:0f:
40:4f:73:39:d0:25:85:da:2e:de:b6:c3:82:8a:30:
30:01:fe:ca:29:11:82:30:be:4c:8b:ee:62:1e:45:
3a:29:cb:d6:1f:5a:47:de:2b:93:c9:37:b1:94:d5:
7f:e8:24:50:ee:2f:2d:02:f1:ca:34:ff:85:02:23:
68:76:bf:78:b7:55:33:76:b6:8f:b5:29:93:aa:1e:
52:7a:fe:9f:08:b8:a5:c7:0f:8b:4f:c7:49:bc:db:
ab:3a:e1:bf:66:22:e6:ef:b7:35:c2:33:6c:84:7f:
80:39:ab:59:b5:49:83:08:2a:b1:e3:77:65:ca:96:
37:8c:29:dd:d1:f9:4e:65:34:c2:12:fa:ba:d0:d4:
37:4c:34:1a:f2:ed:ef:30:73:87:14:4d:9c:96:2b:
29:f8:3a:44:e5:41:67:41:66:c2:26:3a:ea:cd:08:
b1:b6:66:12:75:8b:d9:c8:9f:a8:89:15:24:f6:fe:
7a:8b:66:b6:8f:42:da:e5:a9:09:b0:73:64:cf:d3:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:81:27:9E:2E:09:86:33:6B:F7:10:95:C9:3A:B2:CD:DB:D8:5E
X509v3 Authority Key Identifier:
keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/47A72A7441ED11EC9B02377AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.124.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6e:e5:18:96:23:86:c8:29:20:ca:a7:7b:8c:ba:11:6a:10:
7a:72:a8:f4:74:17:64:4e:c6:ed:60:33:ca:e6:44:c9:e1:c7:
9f:40:d1:18:05:eb:ee:da:c3:0c:d5:41:b0:b0:25:0d:a7:7a:
ff:81:f5:6a:3c:51:36:09:43:ac:a2:a2:78:10:df:07:98:fd:
92:ce:2d:9b:42:dc:61:fe:9e:11:1c:1d:26:4a:0a:5f:a5:9f:
11:77:96:ea:a3:e3:e9:5c:f3:24:aa:2b:1c:60:b0:bd:45:fd:
f5:ef:33:4c:07:31:b1:77:42:91:fc:0b:3c:69:2e:e2:6a:e3:
f4:d1:9b:5b:97:32:ef:73:d1:09:5e:4b:96:1a:af:14:84:38:
49:ae:3f:da:25:06:fb:10:f8:7c:99:18:3d:f8:7b:65:f8:cf:
15:82:2f:28:7a:33:f1:c8:43:28:72:f7:49:05:e5:0c:f1:a3:
d4:58:f2:71:20:44:43:1a:00:01:1e:21:05:37:c0:a1:f3:c2:
63:48:d9:75:a6:0e:83:5f:fe:66:77:45:8c:42:57:46:b5:c7:
92:95:af:a5:57:77:48:58:ed:99:55:15:6c:18:4a:ed:4a:29:
80:b0:ef:75:fe:1e:b8:d8:bc:98:7c:42:24:56:4d:ee:76:fd:
68:39:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:20 2025 by rpki-client