Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File: F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=
Subject key identifier: CD:C3:36:38:98:70:DC:98:8F:8A:8A:10:5C:30:14:CE:24:D2:30:A7
Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial: 03A4
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time: Thu 11 Jul 2024 01:53:14 +0000
ROA not before: Thu 11 Jul 2024 01:53:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 139466
IP address blocks: 103.141.199.0/24 maxlen: 24
2001:df1:b80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F6E
Validity
Not Before: Jul 11 01:53:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=668f3b0a-a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:72:1e:98:6a:b9:41:47:a1:3b:70:b6:fd:
d8:c7:de:4e:a1:e8:7e:08:73:6e:d4:f0:fc:63:1a:
64:d5:84:26:ea:f0:61:c8:c6:5c:c5:a4:e9:11:5b:
90:98:fe:0c:f2:5c:68:de:41:5f:3c:22:f8:ae:0f:
7d:d7:d3:39:42:4f:23:75:a4:9d:1e:7d:87:a6:f9:
ca:9e:99:5f:aa:2c:42:8a:27:9b:e0:47:19:97:bd:
a3:6e:e3:56:58:09:10:8c:b1:87:c1:0b:8e:37:2e:
5b:18:f6:5c:52:24:9b:5d:4f:b9:82:62:8b:91:a5:
f7:b5:4b:58:bb:67:47:c1:63:e4:40:f6:71:91:6d:
b0:a1:f2:96:5c:9d:21:a0:3d:9f:ec:c8:e2:59:eb:
f1:06:d4:37:92:6f:8b:d1:fe:25:70:66:66:d4:6b:
05:a4:0c:da:9a:82:0c:fe:18:61:d5:78:a5:d6:ff:
e3:48:60:dd:bc:2e:f2:8b:04:c3:92:dd:c7:09:8b:
46:1b:63:98:56:c2:d2:a4:92:61:c3:ea:00:ae:e9:
02:f4:5f:88:67:cc:2f:5e:10:40:02:3e:5a:19:ea:
36:29:e3:a2:a7:ab:36:4e:c6:47:c2:b0:7b:52:8e:
aa:e1:e4:cf:ea:56:f8:5d:03:cc:60:02:c0:06:35:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:36:38:98:70:DC:98:8F:8A:8A:10:5C:30:14:CE:24:D2:30:A7
X509v3 Authority Key Identifier:
keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.199.0/24
IPv6:
2001:df1:b80::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c0:3e:3b:14:f2:1c:d0:dc:b6:00:33:78:74:12:2e:91:a8:
c3:20:cb:6c:51:95:9a:46:1c:ff:cc:39:b7:37:5e:91:b6:7f:
98:6f:9b:31:26:15:7c:f2:a0:6f:56:1d:d6:1e:e9:50:25:03:
57:ec:2e:65:bb:87:6a:72:57:6b:9c:75:83:00:2a:bc:db:e9:
10:49:c1:36:e4:72:8f:c7:13:a5:9a:e5:9b:36:81:44:65:63:
41:29:d6:cd:ba:a5:a6:84:95:f6:4f:26:81:2b:49:24:03:ef:
fc:e6:3e:09:73:b0:3d:df:f4:d1:2f:e9:84:4e:80:50:90:66:
0e:5d:79:a0:a4:5b:e6:f5:ad:b4:f8:77:56:9e:cc:d0:5b:96:
10:b6:f7:28:52:d1:11:c7:1e:08:e8:eb:8e:19:f9:f0:6f:ed:
77:1a:c0:d9:e5:60:70:c5:b2:a0:8b:75:03:69:b0:8b:63:64:
95:4c:61:24:24:e5:1d:a1:2d:44:c3:8f:de:bf:d7:64:3b:8d:
c6:f7:69:e7:2b:cf:67:68:98:12:9e:47:83:b8:2f:07:46:b2:
01:c5:c9:df:a1:eb:91:06:d1:0f:39:83:38:0e:c2:c8:de:30:
4a:e5:9a:33:7d:66:29:7c:7d:c2:e4:31:35:85:19:89:d9:ae:
34:cb:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:03:23 2025 by rpki-client