Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
File: F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json)
Hash identifier: 2XBJFF0uFQZ8WRTpcwsb0rfYdVxkVxW6PF5N28R/87M=
Subject key identifier: 8F:21:2C:69:3A:6F:15:B9:18:50:FC:FC:1C:CD:72:46:D1:E6:6E:01
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 056E
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
Signing time: Mon 24 Feb 2025 08:15:41 +0000
ROA not before: Mon 24 Feb 2025 08:15:41 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 396073
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Feb 24 08:15:41 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67bc2aad-be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:3a:d5:2b:12:6c:16:54:aa:95:8e:40:01:
a6:8a:c4:9d:f8:64:c5:b1:43:f2:d1:8b:d4:94:91:
bc:1c:cb:02:3a:23:0a:43:38:52:72:57:32:7d:b9:
82:f2:06:11:3f:dd:c8:88:f6:27:59:21:9f:af:f0:
17:b7:e8:b5:a8:28:22:5f:e6:48:1c:e2:a4:81:38:
03:57:b5:77:38:54:c8:42:7a:35:ae:25:b8:e4:38:
06:8f:14:a0:40:67:cb:b6:e0:84:e3:39:15:83:60:
c9:61:21:a6:80:00:69:fc:c5:b5:27:0b:dd:cd:de:
0b:4a:15:1b:a8:e3:29:1a:92:17:0f:15:8d:ee:49:
13:f7:ea:f9:21:bc:3a:c0:1f:50:c5:b5:28:de:9d:
c7:42:20:e7:f1:b4:de:1d:9f:5a:3c:6d:83:3d:1c:
61:3e:d7:88:85:b9:38:87:39:cf:6c:c5:31:9f:d5:
38:e1:3b:d2:61:d4:3e:21:4d:39:e6:9d:44:83:b4:
1b:46:c6:ef:44:27:ce:a3:4b:96:97:08:97:9a:bb:
ae:7c:7b:8d:aa:e2:aa:01:91:43:28:e9:54:77:21:
64:4f:72:42:66:9f:4a:27:6e:98:36:6e:99:13:1b:
74:b0:6f:3d:ba:e5:1a:f7:47:84:67:96:9c:72:62:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:2C:69:3A:6F:15:B9:18:50:FC:FC:1C:CD:72:46:D1:E6:6E:01
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
60:8e:88:89:19:e5:4d:88:72:38:5a:c2:8a:45:82:84:20:d5:
b8:05:da:f4:8b:ae:9f:af:1e:8c:7c:32:48:79:e5:4c:b4:de:
7d:28:35:20:b8:b6:78:f8:14:d3:de:68:d3:81:40:8f:ea:55:
c5:71:90:ad:da:1c:a6:45:c6:c1:db:bd:55:56:df:c3:a2:92:
2e:b8:32:30:94:96:c2:d6:01:fb:85:cf:bf:23:bc:b3:0e:92:
28:f6:c6:cd:5b:03:78:fc:a9:05:fb:aa:74:3b:ca:90:e1:a6:
fe:86:04:05:e0:f8:b9:c7:22:4d:17:08:b0:b4:17:8f:f1:6f:
ec:73:2b:4d:4a:12:3a:4c:6b:10:62:d4:43:05:42:75:54:36:
6b:27:05:07:fa:05:4e:00:4c:0a:8f:3d:ba:33:9d:34:5d:1b:
f2:b2:43:0e:29:90:3a:8d:4d:6c:ca:e6:09:8f:91:da:b4:6b:
15:b4:31:b3:3c:29:eb:e8:a1:c7:33:28:51:8e:78:0b:9a:db:
f1:51:49:3a:81:46:91:93:24:6b:96:b9:8a:f3:7b:d0:79:c7:
f6:4d:02:9c:4c:e6:18:4d:7c:bd:7c:6d:5b:ee:67:7b:60:6b:
b2:c5:03:f3:0e:61:e8:84:7c:4d:3f:52:d0:52:89:fa:9b:b7:
fd:89:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:11 2025 by rpki-client