Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa
File: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (raw, json)
Hash identifier: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=
Subject key identifier: 8A:4A:B4:B8:65:AE:68:7C:58:0C:9E:8D:8E:25:C2:A0:94:B4:58:C8
Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
Certificate serial: 0A91
Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa
Signing time: Tue 16 Jul 2024 19:57:52 +0000
ROA not before: Tue 16 Jul 2024 19:57:52 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138999
IP address blocks: 103.138.84.0/24 maxlen: 24
103.138.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE2F
Validity
Not Before: Jul 16 19:57:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6696d0c0-f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:f9:3b:69:7a:56:e9:86:bd:e3:3c:1b:2d:
89:e2:a7:01:21:91:a4:5d:5f:b4:c6:42:c7:99:f8:
67:1b:9b:62:22:29:06:51:f5:35:d9:7f:ac:a7:f2:
a4:4c:15:00:92:1a:97:c6:0f:ae:d6:78:48:aa:02:
0c:1e:ca:6f:3e:1c:b8:ae:be:b2:20:8b:0c:ce:0d:
36:9b:89:b7:0f:9c:17:33:f0:39:8d:3c:5a:a8:48:
62:c1:95:a7:b0:33:cc:68:44:eb:91:3f:14:cf:58:
6e:6e:03:a8:be:98:c9:93:b1:02:f0:39:fa:a3:4f:
4b:f3:2b:c3:5f:a8:7c:bb:33:ed:1c:8b:bd:3e:a0:
ab:02:5d:96:d7:fb:80:46:65:72:23:c4:27:9d:39:
0a:6b:47:5c:54:3e:a6:a3:06:fb:f6:bc:94:29:aa:
a2:f0:b7:6a:2c:bd:aa:70:53:f3:65:ba:c7:0f:a8:
13:43:4b:32:80:6c:53:49:f2:3f:27:18:08:9c:94:
ff:60:56:64:33:51:43:32:c0:00:5a:e0:aa:b4:cf:
58:74:f4:28:cc:77:ce:1c:79:09:a6:3e:25:4c:aa:
7b:4e:f1:11:5d:a5:e4:45:0f:ee:7a:a1:db:b0:21:
5a:71:d7:01:d7:c5:15:ba:c7:a8:e1:b9:9e:b8:b6:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:B4:B8:65:AE:68:7C:58:0C:9E:8D:8E:25:C2:A0:94:B4:58:C8
X509v3 Authority Key Identifier:
keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/CFF490F63B3211EAA19CAB2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.84.0/23
Signature Algorithm: sha256WithRSAEncryption
12:b2:0e:f3:2e:19:f3:78:fd:29:c1:ac:9b:ff:7f:97:d2:36:
89:7c:b5:fd:4e:e5:c4:0b:df:83:90:09:88:76:89:5b:46:b8:
9a:d1:38:0d:12:22:d5:9e:da:5d:10:13:86:4c:39:b2:47:ed:
61:15:6e:b8:2e:15:b7:2a:cc:73:da:d1:39:c3:50:81:64:9d:
55:5e:81:41:cc:ec:73:e4:db:8a:ae:7c:74:b9:7a:62:bc:2f:
b0:2d:a3:f4:97:34:c8:4d:18:9a:4d:89:23:b2:17:98:69:22:
8b:09:63:16:c6:91:35:c4:f8:4b:d0:6b:a6:3b:95:68:fe:08:
38:6c:f6:32:df:ec:04:a7:be:53:99:0a:b2:6f:c0:dd:31:fc:
1e:65:cb:4a:6c:c0:0b:1c:63:ff:c9:05:e9:bd:f5:e3:e8:3f:
e2:9a:c1:c6:d6:50:57:a9:6b:2f:3a:9a:f6:d3:2e:b9:bd:7e:
3d:06:7d:8c:cf:1e:41:8b:1a:e8:96:5f:f3:ba:ed:f9:70:78:
fd:60:0a:a7:97:ab:b3:e1:70:0e:6a:a2:2c:7e:0b:b7:61:bb:
7c:7b:68:1b:6e:7f:0a:38:de:0d:bc:aa:a9:4d:a6:f0:28:3d:
f4:5b:41:25:22:d9:0b:08:e5:fd:db:4f:93:66:9d:b6:40:8d:
62:c3:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:12:16 2025 by rpki-client