Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/49E064C0DDB911EF98CAF326C4F9AE02.roa
File: 49E064C0DDB911EF98CAF326C4F9AE02.roa (raw, json)
Hash identifier: trtksRobySXCW6O1jZpTK4Op/84z2J1yRsnktCrK+zo=
Subject key identifier: 40:D9:25:37:E2:39:92:73:7E:F0:41:79:A5:04:9C:89:52:37:2C:1E
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 05F2
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/49E064C0DDB911EF98CAF326C4F9AE02.roa
Signing time: Tue 28 Jan 2025 20:51:25 +0000
ROA not before: Tue 28 Jan 2025 20:51:25 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9387
IP address blocks: 103.79.17.0/24 maxlen: 24
122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Jan 28 20:51:25 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6799434d-583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:57:ec:92:ef:44:3f:05:a2:77:2c:59:d9:
ce:da:45:57:7a:7a:4a:79:ae:b7:83:d3:70:63:72:
d6:75:87:04:3b:a8:82:c1:79:6e:02:7f:46:86:49:
2e:e9:b1:73:c6:94:38:2c:a3:34:55:92:71:5a:17:
91:d0:2e:42:12:4e:5e:89:e2:71:bf:30:b4:78:1c:
10:35:cb:8c:76:37:70:0b:c1:91:57:02:46:d1:45:
e1:0a:b9:fa:c2:af:77:7b:cd:fa:70:41:22:d3:9b:
ca:2f:c9:da:8a:26:1e:f7:03:c7:ff:3b:4e:1f:64:
f3:9a:ab:af:5d:6f:fa:d2:eb:1a:8c:64:e3:52:29:
2d:72:25:83:a6:a5:3f:6e:a2:96:59:74:25:b2:20:
4d:52:d8:6e:c3:0a:cb:65:aa:6f:2f:5f:68:7b:96:
e3:a4:2c:56:b7:a6:15:34:81:37:1a:b2:70:df:65:
90:89:78:a6:78:79:5e:23:40:20:d0:7a:b5:82:99:
20:af:21:65:75:24:8a:26:76:fc:23:cb:4a:e8:ba:
0b:9c:e4:e8:0f:b7:bc:bc:11:e6:00:0e:d2:be:c5:
27:60:01:9d:c2:6a:c4:1c:2a:71:33:b3:86:58:c2:
cf:09:5f:f2:e6:55:ae:a1:82:b6:1b:eb:b3:8b:8c:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:25:37:E2:39:92:73:7E:F0:41:79:A5:04:9C:89:52:37:2C:1E
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/49E064C0DDB911EF98CAF326C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.17.0/24
122.50.0.0/24
122.50.2.0/23
Signature Algorithm: sha256WithRSAEncryption
76:29:f8:87:15:19:d7:0f:4d:4a:e2:ef:65:e0:f6:c4:8f:55:
07:eb:d7:96:31:45:b4:20:4b:ea:19:81:7f:25:6e:ab:9c:88:
61:b1:18:56:7e:69:b7:b8:6b:b2:8f:0c:59:a7:33:8b:43:46:
0b:ac:d8:b8:1d:d1:51:62:4d:f5:28:fe:9a:74:d6:e7:cd:12:
5e:c6:ac:e9:ad:92:45:4d:d6:76:84:51:39:b2:22:e7:3f:6f:
11:6f:f6:0f:11:1a:f3:bf:2f:28:f3:63:9b:7a:e3:1a:42:10:
d0:18:c6:a1:1d:21:fa:c0:b2:5a:00:f6:1f:42:5f:78:40:14:
be:0a:28:ad:0e:81:4b:6c:ae:be:13:3c:a7:09:e0:bf:6d:75:
0a:d4:c3:04:ae:2c:e8:1b:9f:e7:5c:29:7a:8c:d6:e0:72:04:
c3:7f:ef:ce:f9:7a:38:c7:e3:79:97:aa:04:e6:bb:89:6f:20:
89:91:46:00:ce:f2:31:ec:ba:12:80:5f:bc:c8:00:f8:5e:00:
c6:ee:fa:f2:72:59:4a:d7:9c:eb:2e:02:97:ac:12:f3:0f:eb:
5c:05:fc:00:11:ea:6d:4d:63:98:00:93:5f:69:ad:57:73:93:
15:bc:98:ac:09:a6:82:52:51:d9:7e:5c:69:0e:da:5e:bf:4a:
4c:a6:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:51:13 2025 by rpki-client