Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/2E6B1980CA0211EF80E1DD42C4F9AE02.roa
File: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (raw, json)
Hash identifier: XTIn6xd6LAQNjR8zYGrEopF6yPf5strTO17Pxq6MJp0=
Subject key identifier: 72:DB:95:6A:A1:C3:EA:41:48:F1:C9:5E:36:2C:95:29:F4:45:CE:E8
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 0325
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/2E6B1980CA0211EF80E1DD42C4F9AE02.roa
Signing time: Fri 03 Jan 2025 18:40:19 +0000
ROA not before: Fri 03 Jan 2025 18:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.185.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2
Validity
Not Before: Jan 3 18:40:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67782f13-c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:1c:f9:f1:46:10:86:d6:b6:1d:0a:ca:eb:
d1:6e:49:b1:f4:41:e1:f8:83:21:50:8c:8f:fc:8d:
ee:87:fe:d4:c4:2d:87:f4:82:70:a3:7d:ea:f3:a7:
35:3e:cd:c8:e2:3c:d7:d6:d6:01:12:5e:30:3e:f2:
29:53:8b:be:5b:ba:04:a6:49:00:8e:33:9f:53:b4:
e2:7d:7e:d6:08:b3:ef:9e:fb:d2:ad:7e:20:99:da:
68:c4:21:2d:c6:8f:9c:62:23:e3:a0:68:14:c9:b1:
39:47:7d:ca:4d:08:72:42:7d:0b:1f:6b:e6:62:b8:
b6:95:ba:0b:46:06:8e:61:cd:41:d2:f4:34:73:9d:
12:d9:34:59:55:53:11:50:e9:ae:17:2c:f7:93:fe:
16:75:de:5c:d5:3f:db:15:34:70:94:50:68:8a:16:
50:4c:94:23:87:c6:8a:66:a9:78:91:1b:81:2a:f4:
68:ed:2f:59:c2:44:e8:f6:35:f3:37:1e:29:21:fb:
5e:56:41:e8:51:3f:39:f5:ec:ec:fe:a1:f3:12:36:
5d:6a:be:83:1b:cb:34:06:f2:d1:48:43:39:91:84:
7f:fc:61:1b:96:b1:84:24:e6:ec:73:24:4c:4e:bc:
c1:7c:bd:20:92:30:bb:8b:cb:bf:b6:16:43:0b:4f:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:95:6A:A1:C3:EA:41:48:F1:C9:5E:36:2C:95:29:F4:45:CE:E8
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/2E6B1980CA0211EF80E1DD42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
97:40:4b:8f:ce:f8:14:20:ca:31:08:a1:b1:36:56:fb:bc:f7:
85:8c:ca:ce:ae:0b:30:e9:de:de:9c:91:22:f9:cb:0d:35:45:
b5:7e:b0:11:16:fc:96:b1:c2:3f:65:61:00:06:d4:f2:ec:90:
45:84:59:e0:28:2a:d4:80:9b:24:89:be:ff:f9:bc:ba:12:85:
c5:16:d0:43:a2:ba:bc:6d:c3:5d:aa:c2:a7:71:ff:25:9e:4b:
72:61:73:8b:15:00:5f:06:86:52:7f:14:6b:d6:d0:48:3b:d3:
57:f1:1b:18:e9:6e:f6:b4:86:15:d0:a8:54:37:d1:cb:6f:ab:
ed:a6:20:44:92:08:e2:8d:d3:89:bb:5b:a9:7d:64:b7:22:03:
f8:70:91:dd:aa:e8:0b:87:54:e5:60:69:6c:c8:17:18:38:d7:
61:33:d9:8c:d1:ce:23:24:de:cc:04:14:ad:94:04:b7:b5:fa:
4f:b0:12:2e:da:e1:1d:00:06:b5:51:92:25:c3:4a:99:b9:a9:
46:6a:3e:41:15:d0:6a:95:e3:a9:1a:e8:35:21:b7:36:e0:62:
62:06:e5:cc:3e:85:28:bc:e8:bb:ca:45:e0:2c:90:e6:62:98:
ce:cb:82:5f:ae:9e:b5:07:b2:93:4e:a4:74:a6:d8:8b:ae:73:
c8:4c:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:42:27 2025 by rpki-client