Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa
File: 4CC318AC7FFF11EB8D47E82EC4F9AE02.roa (raw, json)
Hash identifier: 4VUKnU4kNEFcNtf8BMCmylFtM9+Lha6DbgUuHYC6jg0=
Subject key identifier: 60:3E:23:FB:FE:48:37:99:63:11:97:45:58:DB:41:70:96:84:0D:69
Certificate issuer: /CN=A9174ECB/serialNumber=6B7EE2891EBE1D3AF0A562C5A8466581B90459A4
Certificate serial: 118B
Authority key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa
Signing time: Tue 31 Dec 2024 17:15:07 +0000
ROA not before: Tue 31 Dec 2024 17:15:07 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 137199
IP address blocks: 103.101.234.0/23 maxlen: 23
103.115.12.0/23 maxlen: 23
2401:d6c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4491 (0x118b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174ECB
Validity
Not Before: Dec 31 17:15:07 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6774269a-9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:2a:c2:54:7f:ae:9a:a7:d2:36:c8:2e:38:
63:7f:0a:51:71:b5:d0:79:b5:3f:9a:00:fb:85:2e:
37:07:9c:e7:4b:3c:84:e2:84:87:be:12:62:56:97:
3a:c6:a2:0e:72:4b:fa:75:a8:c7:f5:ea:79:30:55:
c2:46:6e:bc:e6:c8:f1:dc:93:be:61:bf:44:7c:0c:
55:f1:a8:ba:c7:2a:6b:87:61:2f:22:03:4c:6c:3e:
d4:1c:dc:1a:e2:7a:69:4d:59:ff:14:56:b2:4a:37:
b1:b4:6f:4a:53:21:31:05:c3:e8:9e:05:bc:dd:4e:
e6:b6:6b:63:4c:54:b4:52:29:be:7a:bd:be:27:e2:
48:ad:9c:bc:9a:8f:d4:18:19:d8:cb:14:c0:48:83:
c7:45:5c:ae:92:07:92:22:e5:12:40:7c:31:bc:21:
35:14:1b:19:fb:aa:c1:aa:71:80:8e:4d:9d:43:cc:
d4:35:b4:dd:aa:56:0c:81:9b:6b:cd:61:1a:44:8a:
ee:87:04:e7:5f:26:39:d8:cb:4c:71:28:76:17:f2:
91:c1:d9:30:98:e6:38:0c:67:f8:c1:f5:67:6b:9b:
d5:88:ef:6f:7e:0f:76:fc:80:08:12:77:9a:2f:c6:
ff:35:16:47:64:d8:49:74:74:c6:64:6f:58:61:8c:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:23:FB:FE:48:37:99:63:11:97:45:58:DB:41:70:96:84:0D:69
X509v3 Authority Key Identifier:
keyid:6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/4CC318AC7FFF11EB8D47E82EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.234.0/23
103.115.12.0/23
IPv6:
2401:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:f8:28:26:f2:57:74:71:26:b9:71:28:a7:b8:33:93:9f:99:
40:09:96:58:e1:fc:2a:0e:d5:b0:91:d7:d8:0c:8b:2c:3e:d6:
9a:a1:42:36:9c:4f:d2:54:47:ac:07:a1:da:c5:e5:51:ac:94:
3d:f3:11:d9:5f:f8:0e:14:0c:d0:cf:b5:98:8f:83:f9:c1:18:
92:02:5a:3e:81:a5:db:90:02:c7:ab:35:9c:13:84:5d:80:3c:
94:db:04:3e:8f:76:d9:ee:f0:db:0f:f3:35:f2:4f:80:a8:d6:
98:cc:5d:a1:ca:53:79:67:59:32:49:0a:e1:d0:60:b4:70:33:
2c:4b:8b:f9:ab:e6:31:be:f0:5a:b8:74:b4:82:67:bb:de:d2:
c6:9e:70:0e:15:e0:b3:2c:5f:e6:fd:39:15:7e:98:59:42:3f:
85:69:33:d1:a5:3b:95:ce:34:69:aa:33:18:ff:e8:25:d3:b5:
4d:29:a0:f2:a1:d1:01:d9:06:59:85:42:eb:ee:d4:d2:26:ff:
93:1a:0a:2c:19:c6:d7:0e:f2:35:01:15:8c:f6:7e:61:b3:eb:
7c:25:43:64:f3:41:76:58:a0:5d:7e:e9:04:a5:25:e6:40:c5:
32:69:64:e4:19:0d:90:d9:2f:a9:00:52:b3:d2:da:70:7c:75:
ae:fe:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:34:26 2025 by rpki-client