Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa
File: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (raw, json)
Hash identifier: bnHHifqyfmIvk8onUg2t/SyKb3Qse0OgPOBOI1YqMW8=
Subject key identifier: 09:B8:A9:F3:7E:E1:D5:B1:9B:D7:F4:D2:2A:43:99:8C:9E:82:A5:DE
Certificate issuer: /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9
Certificate serial: 0793
Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa
Signing time: Sat 28 Sep 2024 21:10:49 +0000
ROA not before: Sat 28 Sep 2024 21:10:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140963
IP address blocks: 103.153.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1939 (0x793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917126B
Validity
Not Before: Sep 28 21:10:49 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66f870d9-73ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:b3:47:41:f4:fc:63:23:76:1d:15:01:3c:
dd:f0:36:fc:a7:e2:84:1c:b7:64:8b:2d:93:0d:35:
87:b7:62:dd:95:bb:da:98:63:7e:a1:0a:2f:85:a3:
52:16:5f:ab:79:61:a3:34:7c:0a:11:84:b4:b4:53:
9d:dd:bf:bd:66:d4:46:94:a3:66:ae:76:3e:c2:fc:
ab:19:1f:d0:fa:3e:c0:0a:5d:4e:0d:1a:4e:2a:00:
61:0a:c2:6f:17:71:98:a7:33:52:31:54:b9:ef:44:
e7:91:e4:a6:6e:c9:b0:fe:21:41:52:80:73:34:87:
51:fd:2c:9a:b1:0d:df:b7:cc:33:24:c4:1d:88:14:
4a:fa:d1:27:a2:46:f6:fb:58:ac:f7:1e:9f:6a:f1:
ab:58:83:4b:c7:20:e0:fc:dd:b2:8c:ea:27:2e:06:
a2:9e:1a:8b:f5:2f:e3:df:11:16:51:05:dc:7f:5e:
1d:e2:a4:9f:c5:36:7e:b9:34:2d:10:df:5e:6b:02:
bd:86:61:0d:98:65:e8:b8:4b:70:85:23:95:d8:3c:
64:ff:53:2c:f9:33:b7:d8:79:e6:be:48:b1:45:12:
1d:eb:8f:1c:0d:ab:3d:42:64:fa:83:d5:8e:c5:13:
78:40:17:99:73:14:a1:47:db:58:17:ee:e9:42:f9:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:A9:F3:7E:E1:D5:B1:9B:D7:F4:D2:2A:43:99:8C:9E:82:A5:DE
X509v3 Authority Key Identifier:
keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/CF4D7C70DADE11EABE8DD41DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.212.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:9c:61:44:33:13:90:db:84:a5:3a:ef:28:af:c8:6a:f3:0a:
d6:92:0f:7e:5f:a5:46:b8:30:03:4e:df:4c:5d:c8:10:c1:94:
28:b4:64:cc:c0:e8:75:60:bc:1e:a7:d5:df:5f:bd:c9:c4:e3:
19:55:70:e6:7b:cc:48:79:5d:e5:c8:8d:19:e5:26:de:5d:b7:
d6:9a:8f:49:d2:fe:49:70:4a:28:a6:1d:67:78:87:cc:0a:ee:
78:50:39:7c:d0:b0:45:d3:74:0c:25:e4:b8:ff:56:bc:a7:fa:
85:c0:df:14:ba:34:7f:f4:2f:6e:86:e8:2f:93:bb:b1:b6:a6:
a7:ce:2a:2d:21:39:91:15:51:4f:79:d4:09:2e:cb:62:47:ea:
1e:f2:08:3b:c3:eb:98:d2:f0:ca:2f:9c:3d:9d:b8:25:db:10:
52:b6:22:59:f7:71:f7:2f:0b:d3:b1:83:6c:ec:49:dc:36:ad:
8d:c3:06:42:61:c9:f2:62:b2:b9:1e:9e:57:f9:3a:4b:a6:02:
f9:f8:47:12:48:0c:70:a8:1d:ef:00:67:64:ac:7a:aa:b9:ee:
21:5b:1b:45:9a:24:3b:71:ed:6d:f8:2b:27:a6:fe:1b:24:02:
cb:87:90:38:90:63:16:a8:f6:e6:85:b7:e0:ce:81:a2:bc:07:
b3:03:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:32:32 2025 by rpki-client