Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa
File: 7D3B257298C411EC97E3503CC4F9AE02.roa (raw, json)
Hash identifier: 6grT2T2iSHeWzKw66g5XN9FJCWiwh1LX3u2dZ5E6lG0=
Subject key identifier: 72:34:15:EC:F3:34:8E:CE:E1:FB:3F:44:36:5F:52:72:35:60:14:57
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 06CA
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa
Signing time: Mon 30 Dec 2024 22:01:08 +0000
ROA not before: Mon 30 Dec 2024 22:01:08 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134455
IP address blocks: 103.160.92.0/23 maxlen: 23
103.160.92.0/24 maxlen: 24
103.160.93.0/24 maxlen: 24
2406:e7c0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D
Validity
Not Before: Dec 30 22:01:08 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67731823-44a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:c6:97:95:54:9c:21:2f:c6:76:34:bf:b0:
0c:48:04:da:66:4f:a5:16:d8:9c:e0:22:72:4c:fa:
79:12:7e:6b:5b:74:ee:dc:36:d3:35:87:17:a7:b4:
95:55:23:fb:48:1d:17:08:9b:09:4d:ef:8c:a3:3d:
50:dc:89:bf:87:0f:50:51:4b:c5:03:14:97:13:19:
cc:ec:65:ac:09:c8:8a:ee:19:1b:7f:02:2a:3e:88:
bd:66:fc:4e:9f:23:9d:27:1a:7a:c9:36:f7:78:34:
be:16:c3:fe:6e:82:d5:5a:0e:ef:c8:4a:bd:73:46:
29:2a:38:2f:37:b5:2b:29:f7:3b:63:88:b9:57:b7:
3a:ce:60:d5:b4:7e:15:04:cc:02:0f:7b:6e:13:ff:
44:10:5a:41:36:23:2f:3d:92:9f:e9:ed:21:6e:8e:
db:c0:5d:7a:15:0b:fe:57:57:aa:14:f7:7e:36:15:
8a:e4:b2:82:d0:98:d2:be:44:e7:91:c8:aa:f0:f6:
b8:24:29:b1:68:b0:71:f3:32:aa:4b:bc:f0:f2:f3:
6c:22:b4:0f:6c:ad:3b:0b:42:42:fd:07:4d:a3:66:
f8:a9:0d:99:b7:73:10:52:2d:f2:57:b5:ed:b6:6e:
2e:0c:f8:08:49:60:f7:aa:2e:21:bb:88:2b:29:e8:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:34:15:EC:F3:34:8E:CE:E1:FB:3F:44:36:5F:52:72:35:60:14:57
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/7D3B257298C411EC97E3503CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.92.0/23
IPv6:
2406:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:23:4a:4c:6b:81:98:6f:69:0c:40:17:a2:32:43:c2:bd:bf:
ab:01:60:36:8a:cc:3e:e3:0f:6b:b9:9f:da:fd:f7:c8:fe:16:
d3:04:81:bb:7d:e5:40:db:f9:25:08:b6:51:a2:64:8f:8a:9c:
ce:92:9e:a8:8f:75:17:8d:9a:a2:06:21:c1:e2:56:18:94:06:
24:0a:bb:f1:3c:84:b9:f0:54:82:36:ae:87:91:4d:a8:c2:f6:
ae:13:f3:eb:9b:cf:d8:be:1c:8e:bb:b1:60:26:11:f4:fb:38:
bc:47:42:fe:29:b0:68:a4:fe:c4:94:df:ca:94:15:23:b1:83:
c3:93:c2:c8:fe:83:bb:17:8c:0c:3e:90:01:bb:6f:e3:0f:49:
c4:74:65:ca:aa:84:f7:a1:06:c6:38:26:3f:98:73:27:fc:05:
68:6b:5d:10:1d:c3:71:e6:d5:75:52:5f:a0:0d:70:01:31:08:
0a:19:8c:72:86:e9:8a:65:85:d2:e3:23:08:36:ea:e0:9c:48:
7d:e5:56:55:f0:f7:d8:e1:07:d8:97:25:09:d8:48:d7:c0:8f:
77:b7:6e:ea:d2:df:41:a3:cb:55:34:02:d4:90:43:bf:40:16:
2a:1c:6f:2f:af:a3:ab:73:83:5f:bd:61:ed:fc:c0:d3:7b:4d:
21:04:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:36 2025 by rpki-client