Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/F4B6411CB66311EFA3AAC556C4F9AE02.roa
File: F4B6411CB66311EFA3AAC556C4F9AE02.roa (raw, json)
Hash identifier: rIQFTXDi7ZHIGVFOEnBvrjYmYtZ0/1xJTHB5kghRNxY=
Subject key identifier: 09:BA:CD:CD:42:BD:4B:AA:AD:20:C2:35:7D:FA:48:13:74:5D:95:16
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 030A
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/F4B6411CB66311EFA3AAC556C4F9AE02.roa
Signing time: Mon 09 Dec 2024 19:29:49 +0000
ROA not before: Mon 09 Dec 2024 19:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.185.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2
Validity
Not Before: Dec 9 19:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6757452d-1851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:bf:67:73:27:45:3c:6c:12:bc:d6:6c:80:
23:a5:a0:20:63:a0:a6:dc:1a:f6:5e:e1:f8:2d:5d:
7f:d9:b8:d3:e5:76:90:a5:cb:5c:e0:d2:79:5b:0a:
da:77:4c:cd:fc:b8:67:f0:64:df:d3:93:95:5d:ce:
2f:fd:04:72:ee:f8:37:68:bf:77:3f:fd:bb:60:71:
4e:54:0b:7d:48:37:da:d4:71:8b:59:d5:d5:e2:0f:
18:50:ea:08:01:d3:0b:86:0b:5f:6d:19:0f:51:07:
b6:8a:aa:9c:50:2d:02:a9:84:6f:4c:24:1f:22:11:
12:dc:9f:0c:bc:0c:9c:48:04:ee:b7:e4:3c:8c:50:
5a:f0:01:d8:b6:a3:3c:0a:98:58:31:1c:6b:72:17:
b0:54:0c:5a:6f:e4:83:63:e5:90:3e:bd:e7:4f:22:
dc:30:88:56:da:39:f1:1e:08:de:24:a6:68:52:b6:
53:d1:35:8f:8e:96:17:33:95:a0:5c:d1:78:31:aa:
ce:07:09:f9:fd:7e:25:a2:4b:d3:22:63:76:3c:31:
8d:fa:b8:97:c2:8b:b0:bb:b8:23:34:30:12:c4:d4:
f0:8d:77:01:d1:0b:08:77:bf:12:87:fb:c9:ac:b2:
e2:1b:3a:41:fa:50:ed:aa:ec:1b:88:89:ea:4f:2b:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BA:CD:CD:42:BD:4B:AA:AD:20:C2:35:7D:FA:48:13:74:5D:95:16
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/F4B6411CB66311EFA3AAC556C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:30:8b:b2:9f:94:6d:05:13:5a:ef:46:16:65:10:73:b4:06:
dc:f6:20:9e:4d:5b:dd:9d:d5:84:2a:f1:f9:cc:eb:fc:16:04:
5e:96:46:7f:19:4c:f1:e9:22:07:4e:d4:2a:54:3c:38:13:1e:
f9:2b:99:9e:02:95:2b:7a:61:3d:60:85:b3:31:f0:a7:52:b4:
84:37:05:94:1d:dd:01:d4:51:58:42:3e:7e:8b:08:3c:27:49:
e9:a2:4f:38:75:8f:05:94:36:35:1a:50:43:c4:a0:fb:fb:21:
07:65:60:8f:3b:e2:83:81:6f:31:83:c6:73:57:81:c2:42:70:
89:0f:c3:c9:11:0e:17:65:0c:ca:6c:b7:89:45:d4:92:eb:bf:
7b:9a:80:a7:39:45:0c:32:40:05:ac:ca:b9:58:b3:b1:fa:a0:
c7:1a:90:3b:72:58:0a:41:e1:ae:b6:39:e8:24:0d:4a:8c:21:
6f:c4:b2:0b:f8:9d:21:61:1e:57:d4:2f:1a:09:60:a6:af:ee:
62:b0:41:ac:cd:39:03:05:27:2b:bb:7b:a4:74:19:bb:b4:bd:
2f:ec:15:1a:45:d2:49:8d:b5:90:27:75:ab:1b:b2:99:32:9e:
25:62:4c:64:93:bb:6f:79:f2:ec:73:20:e9:b1:45:41:1e:64:
af:61:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:20 2025 by rpki-client