Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
File: F7EA272C043111EDB7DA7485C4F9AE02.roa (raw, json)
Hash identifier: GvHHYXqLEy9+VYPaaPWsg/cUO8NLq5PLJv3QtK7UqmI=
Subject key identifier: 17:2E:98:39:F8:7A:5E:18:07:02:C9:BF:9C:E5:C2:92:8C:DB:E7:1D
Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial: 0371
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
Signing time: Sat 01 Mar 2025 03:04:26 +0000
ROA not before: Sat 01 Mar 2025 03:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142403
IP address blocks: 103.146.50.0/24 maxlen: 24
103.146.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160F2D
Validity
Not Before: Mar 1 03:04:26 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c2793a-a14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:d7:8b:f5:81:e0:58:95:71:aa:34:05:7b:
af:81:60:3b:e1:09:9a:2d:da:28:b4:e7:a4:b2:68:
a6:a6:8a:c2:43:51:04:03:0b:24:12:93:c4:7a:ae:
ba:b7:0c:4c:08:d2:db:1b:4d:fd:0f:18:f6:fb:ad:
a8:a2:bd:a2:72:41:ac:51:a9:be:18:b5:f5:3a:5b:
91:9c:af:58:3a:dd:26:19:b6:7b:45:41:ac:0c:be:
3d:b9:29:8a:b7:b2:00:dc:9a:9e:c2:58:80:2a:d3:
76:7d:f4:c9:7b:94:e4:2d:cd:cf:d0:63:4e:94:d4:
23:77:9b:84:9a:75:57:11:5d:18:a3:f1:75:24:bc:
18:51:40:cf:c7:6a:98:a3:dd:f8:80:53:35:fb:b6:
a6:74:6f:52:63:36:5e:48:6f:f7:3a:91:43:60:f8:
66:03:b0:77:1f:89:c1:5a:12:bf:03:b3:9e:66:7a:
c7:c1:31:98:d3:d0:22:10:de:2d:97:3b:d7:24:cf:
a9:42:39:81:1a:8f:be:e4:e3:f0:d9:26:39:42:d8:
2f:34:d1:e2:9d:18:4b:2f:2a:17:ab:9c:4a:e8:28:
75:9a:b4:82:58:74:f2:0b:40:8a:1c:fd:b6:ff:64:
6b:d3:78:28:a0:6e:c9:23:16:0e:ee:a4:e3:fe:c6:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:98:39:F8:7A:5E:18:07:02:C9:BF:9C:E5:C2:92:8C:DB:E7:1D
X509v3 Authority Key Identifier:
keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.50.0/23
Signature Algorithm: sha256WithRSAEncryption
47:94:51:41:80:8e:7a:22:4f:00:f3:af:0f:07:5a:fe:dd:93:
d4:1e:f5:12:6c:ee:5e:9f:aa:de:d4:d0:c1:33:68:b2:67:64:
1f:f1:ed:13:fd:eb:15:fc:39:87:42:25:d4:32:a9:26:4f:f7:
3e:ab:36:cf:8b:7c:57:76:e3:72:09:9c:4a:0d:d0:08:7b:5a:
69:f3:96:0d:b8:61:1a:77:62:d8:c4:54:ac:7a:f1:b1:5d:aa:
a0:47:dd:02:eb:60:68:78:2b:4a:c7:a0:0f:cb:39:9b:dd:5d:
d7:68:5a:63:f0:76:b7:9c:32:69:2b:26:90:2d:7d:a7:90:c7:
cd:33:10:c4:71:8c:d0:29:2c:4d:85:92:3b:36:0d:bd:b7:11:
d7:13:86:d6:84:96:30:b5:c1:7c:b2:f0:cf:f5:d1:4c:1b:e3:
01:dd:2d:a3:b8:3d:47:cf:90:5e:dc:d8:b1:78:78:1b:db:5e:
46:aa:dc:b7:18:0d:ea:59:9d:b3:7f:34:73:63:1f:11:ad:bb:
72:d3:f5:8d:c6:8b:95:d1:31:08:d2:c1:14:44:f4:a7:0c:f6:
13:c4:4e:e4:3b:c5:3a:b6:dd:62:d5:51:9d:58:7f:6d:b5:a7:
5b:f7:69:4c:20:9d:47:f0:47:a1:06:b0:41:ba:3e:ef:18:1a:
15:91:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:15 2025 by rpki-client