Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/E8D78EDCF28611EF8D2AAD3AC4F9AE02.roa
File: E8D78EDCF28611EF8D2AAD3AC4F9AE02.roa (raw, json)
Hash identifier: mLQl1L672XUrQcEZSI3ncLg9X1CTIQZZRIh3i6pq3dY=
Subject key identifier: 50:0E:BB:2E:11:C8:DA:28:7D:A0:F5:FC:18:B6:33:0E:7D:25:52:DF
Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial: 079B
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/E8D78EDCF28611EF8D2AAD3AC4F9AE02.roa
Signing time: Mon 24 Feb 2025 08:12:28 +0000
ROA not before: Mon 24 Feb 2025 08:12:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 153038
IP address blocks: 103.214.216.0/24 maxlen: 24
103.214.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CDDF
Validity
Not Before: Feb 24 08:12:28 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67bc29eb-17a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:5e:c9:3a:e8:2d:57:84:38:9c:9a:15:b8:
a6:25:28:53:27:64:c6:3a:fe:a9:36:d9:ee:49:c6:
d6:b3:ff:13:17:55:0b:62:e6:ce:d7:0a:52:5e:67:
4b:67:0b:1b:f4:47:da:a0:d3:f2:b4:06:95:33:de:
84:ee:fc:d9:04:dc:b3:f1:3a:c2:44:23:bd:87:be:
d4:5f:a7:de:5b:a2:21:be:c2:d3:91:43:88:ec:89:
8e:0f:8a:7c:9d:d2:10:f3:41:d8:23:c0:1c:ce:86:
0c:1f:5d:95:3c:80:86:73:15:a4:5a:b9:42:2f:4f:
77:b2:f9:7c:a3:32:5a:08:61:96:31:68:84:a8:0e:
d0:e3:95:9a:b7:de:6d:73:01:18:40:e2:69:c9:02:
cd:08:f8:52:56:5b:6f:4b:e1:04:d2:8c:08:5f:e3:
5b:57:93:57:af:f1:f8:d3:42:03:38:5a:50:c3:db:
74:bf:43:c7:5b:10:e6:80:34:23:22:d0:b6:51:5e:
66:89:23:83:30:93:4c:eb:50:fb:db:e9:28:a1:6d:
88:10:d6:1c:93:8d:f2:84:2a:03:46:77:77:03:5c:
93:62:9c:b9:c3:87:0a:d6:e6:4c:ff:d7:89:a4:ad:
83:d6:51:d7:d7:ca:ec:41:56:a6:1b:de:35:7c:a5:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:BB:2E:11:C8:DA:28:7D:A0:F5:FC:18:B6:33:0E:7D:25:52:DF
X509v3 Authority Key Identifier:
keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/E8D78EDCF28611EF8D2AAD3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.216.0/23
Signature Algorithm: sha256WithRSAEncryption
50:16:e6:34:89:60:b9:a2:ca:34:fe:7c:12:0f:83:09:68:a6:
76:ae:9f:79:12:f6:df:93:cc:a6:62:de:f0:90:d7:a8:a0:65:
ce:52:23:6f:5b:d5:98:d4:67:85:15:22:48:7d:98:85:9d:09:
53:45:b2:4c:5c:14:28:0f:a8:0c:85:e6:44:51:d6:70:03:6c:
08:1e:25:ae:3f:db:03:c0:cd:a7:f6:b5:fd:4e:0f:ed:86:4b:
c2:e1:47:d4:46:f2:62:ed:0b:99:94:e4:91:36:59:79:ec:7c:
93:62:47:5f:a1:62:93:90:4f:46:57:e3:f2:e9:84:f9:0d:2a:
6d:46:2c:42:e9:d2:8a:df:54:a4:c1:00:1a:d6:2b:68:dd:34:
79:f8:7f:b0:06:6a:95:b2:e1:9b:41:80:91:ea:59:b2:93:fe:
5c:e2:95:eb:4a:40:a4:6c:34:bb:95:61:bc:b9:9e:76:ed:fd:
5f:ea:ae:5a:ca:cf:0a:9f:61:d8:34:94:f8:5a:ab:a2:3e:55:
d5:e0:3a:4e:a1:21:d5:2a:37:e6:17:89:51:9b:2d:db:c4:e0:
d4:d1:56:c4:5f:55:5a:ee:54:7d:b6:7a:45:c3:36:03:fc:3c:
2a:52:c2:b2:a4:9b:de:85:d6:07:64:aa:00:0b:ba:87:74:04:
b1:a4:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:00 2025 by rpki-client