Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
File: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (raw, json)
Hash identifier: dQp1RFXkmdHYdN2uYRrVX4OpwPj5pGn/GAC5Xyj0LE8=
Subject key identifier: FF:BF:A2:B1:E9:F1:4D:9D:2D:DE:73:42:A1:D0:F1:B7:CE:F4:FF:35
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 7A
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
Signing time: Sat 29 Jun 2024 06:49:17 +0000
ROA not before: Sat 29 Jun 2024 06:49:17 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149841
IP address blocks: 103.187.240.0/23 maxlen: 23
2400:7fa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7
Validity
Not Before: Jun 29 06:49:17 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667fae6d-156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:19:0e:86:d3:aa:67:b5:54:ae:0f:9a:60:
d1:17:e3:30:41:7d:79:05:09:90:78:e4:ad:a3:2f:
eb:43:3f:32:52:a6:50:d4:fa:db:96:70:44:2d:f2:
b4:73:6d:5c:a7:36:41:9a:a2:0f:48:44:e4:8f:ec:
83:68:7d:b4:0f:4a:a1:a2:31:5f:db:f6:da:9f:a7:
a3:c3:23:65:77:6a:b3:c1:27:61:a0:23:b9:28:87:
1f:6b:d3:95:48:ac:30:98:53:e5:63:84:e8:04:d7:
cb:5d:d2:4e:2f:be:ea:df:59:8b:b6:07:2b:3d:84:
5c:38:44:dc:59:71:4d:31:42:a3:d1:5c:37:de:f2:
1b:41:e7:00:90:75:ef:b2:0d:17:ab:d7:3e:9f:1f:
17:ed:84:2b:10:0e:61:8c:87:b5:24:43:52:88:3d:
e9:1a:77:d6:2f:f7:c5:a9:ea:81:47:1e:30:6a:64:
d7:61:74:13:9d:c4:08:2c:31:d7:10:73:75:5c:84:
c0:da:3d:27:b6:83:8b:56:c9:66:ef:ef:20:70:4e:
b1:0c:7f:dd:56:82:64:f0:2a:68:ec:70:89:9a:a1:
97:74:80:b3:64:fa:f0:88:5d:b7:39:1f:b8:a7:64:
21:08:5b:5c:0d:c4:c5:20:7c:51:22:a7:d5:f8:2b:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BF:A2:B1:E9:F1:4D:9D:2D:DE:73:42:A1:D0:F1:B7:CE:F4:FF:35
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/9BE3C7087E8311EEBC7E6681C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.240.0/23
IPv6:
2400:7fa0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:7e:8e:9c:2b:68:34:6d:d4:d0:48:d3:58:68:16:c0:3b:d3:
98:93:cd:8a:88:da:cc:9a:1b:61:bd:27:6d:30:aa:45:44:a5:
4b:c2:53:9d:bc:03:5e:6d:9b:91:05:65:81:77:17:37:85:56:
8d:17:3b:43:2d:77:31:35:2f:3b:3c:e0:3b:00:c6:e0:13:1c:
f9:a9:1f:96:64:83:fa:6c:13:56:e0:31:44:32:6c:13:fd:31:
a3:66:fd:5e:b6:96:a5:68:16:6d:82:99:00:e8:b0:08:d8:65:
80:98:e4:ff:4e:6d:d1:e3:98:8d:c5:01:99:09:f6:a8:90:61:
be:71:77:d2:04:e0:55:a5:d9:c0:6d:03:dc:2c:bf:7e:8c:c0:
ed:1d:bd:ce:58:bc:6f:4d:ac:5f:1a:f2:ab:75:0b:30:d5:4c:
04:2c:f5:85:d3:8b:07:ff:37:03:3a:2a:93:c3:40:b7:1b:a3:
75:2d:43:1b:3c:bb:9c:9b:41:59:86:d8:51:6b:c4:87:d5:58:
36:6f:d7:e6:14:7b:b8:29:a5:70:6e:08:f6:c1:6c:52:8c:75:
62:f6:b1:97:98:2c:43:79:08:56:f4:ff:93:1b:8c:90:95:c5:
4d:4e:73:41:bc:00:74:67:9a:35:27:ca:4a:71:af:fa:93:9b:
90:c1:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:32:39 2025 by rpki-client