Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
File: 67CD2004292211EB8A9B3D73C4F9AE02.roa (raw, json)
Hash identifier: 3c9SajVW3rwhjEgpsfXUDuJrEWYZ09Q/Vkb+t9fja5E=
Subject key identifier: 8F:B8:93:8C:41:DB:D7:64:4A:9A:50:44:4C:74:25:53:AD:F6:AA:1C
Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial: 0716
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
Signing time: Tue 10 Dec 2024 21:51:11 +0000
ROA not before: Tue 10 Dec 2024 21:51:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 136902
IP address blocks: 103.157.182.0/24 maxlen: 24
103.157.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916432A
Validity
Not Before: Dec 10 21:51:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758b7cf-9ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:d4:8a:19:b8:eb:bf:f3:25:df:90:d7:b5:
a6:4a:2b:af:e0:25:d1:3a:2d:f2:db:94:1f:ad:07:
a9:e6:85:6a:e9:58:7c:2e:98:fa:de:7d:a5:2e:73:
e1:e6:c8:53:c0:01:d3:eb:8f:79:f2:e9:b1:b8:99:
e4:bb:15:a4:8f:46:8d:49:02:d2:31:84:1e:12:95:
c2:a6:c9:7d:d3:0f:19:eb:cc:d3:af:a1:1b:35:bf:
55:d9:88:ed:f8:6a:26:98:80:5e:bc:fb:aa:ee:55:
30:6d:32:66:a0:d4:59:ee:31:f7:6d:b4:75:9e:9a:
14:16:33:df:b4:1b:e6:ca:76:e3:8f:43:a4:cf:5d:
ff:0a:32:bf:33:bf:06:48:e6:10:69:72:2b:3b:96:
0b:a3:a0:7a:48:04:b5:ef:66:de:5d:4c:43:4e:42:
a7:66:84:25:6e:9d:25:e0:09:b0:ea:a2:53:a4:ee:
3f:e3:f7:67:04:e8:07:f6:c0:87:8b:a3:dd:fa:d1:
a3:2e:ef:48:f6:61:8e:fe:9a:86:79:ca:cc:16:24:
f0:2c:4d:b3:b9:4d:91:c7:b1:a3:d1:31:ca:e4:2e:
93:0b:9f:35:06:9e:49:a5:94:70:27:c9:db:22:10:
53:8a:4b:f6:37:cd:ae:52:e1:bf:af:e8:e7:14:a2:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:93:8C:41:DB:D7:64:4A:9A:50:44:4C:74:25:53:AD:F6:AA:1C
X509v3 Authority Key Identifier:
keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.182.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a1:5d:a9:26:03:92:ac:9b:fa:2a:0c:c8:1b:89:5a:20:1d:
0e:5a:e1:bc:f5:47:38:59:1e:56:dc:64:7f:7c:64:5c:5c:ce:
b3:f0:34:f1:62:72:50:31:14:e0:ea:d8:7f:85:24:03:98:4d:
b7:bb:c8:34:38:c4:51:49:4f:26:03:95:83:f4:1b:3f:74:26:
ae:56:d7:cc:d0:30:41:77:f3:c4:e5:99:4a:05:fd:ff:ed:69:
c4:50:1a:f7:36:30:9c:38:dd:95:27:2d:d9:78:06:6e:ed:06:
e2:8b:4c:4d:12:f4:dd:c5:4b:9b:df:d3:78:48:71:24:de:b4:
4c:f7:69:6c:c5:72:89:27:8c:6b:ca:71:5e:3c:64:70:2b:30:
bb:af:fd:65:d2:95:ed:60:17:db:f0:d5:1c:3e:13:09:f7:cc:
ae:8e:44:ac:35:7c:8d:c3:d1:04:b6:60:6a:71:ea:15:3a:fb:
0d:09:59:83:0b:99:81:90:16:03:58:24:70:e4:be:5a:ea:df:
68:3e:db:50:6a:7f:d4:a5:2c:16:e6:d9:f5:16:bb:d2:bd:5a:
6a:7c:b6:21:5f:d2:11:38:76:8c:02:32:0e:f7:9c:16:56:1e:
e5:a4:e3:24:35:16:9e:39:bd:b2:b4:27:94:eb:75:25:2e:ec:
7f:13:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:39:00 2025 by rpki-client