Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
File: 873B172AA46611EFB7561648C4F9AE02.roa (raw, json)
Hash identifier: vo5lQMl5I8uhZ1s6XXgPIO5Xr6twjgZLI/MtkF4v78k=
Subject key identifier: 1C:E9:F2:89:C8:D4:CF:7A:4B:59:78:83:E8:35:CE:73:F2:B0:6B:7A
Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial: 5A
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
Signing time: Sat 16 Nov 2024 22:02:53 +0000
ROA not before: Sat 16 Nov 2024 22:02:53 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 20473
IP address blocks: 103.175.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716
Validity
Not Before: Nov 16 22:02:53 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6739168d-932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:54:de:c9:9c:4f:84:3a:97:26:2a:a9:cb:
75:51:f4:de:01:4d:49:83:8a:f2:0e:15:a9:62:60:
e7:66:4b:b6:e0:a7:f3:74:4e:08:bc:73:ee:5b:5d:
37:6d:66:c8:a9:ad:65:3a:10:12:49:da:6f:e1:87:
93:6e:24:73:78:4a:27:3a:3c:f2:7b:b7:1a:f7:96:
f2:9f:5d:1f:fb:5d:0e:84:f2:08:67:1b:93:80:1b:
0e:cb:77:22:8d:3b:dd:cc:53:89:16:a6:f2:0c:7f:
81:be:ff:e1:e9:76:5f:3e:b6:be:cb:38:6a:9b:48:
a8:f4:bc:0b:9b:22:ec:2d:ce:6b:7c:a2:51:e3:b8:
ed:80:ec:e7:df:00:4c:f0:96:4a:0b:a5:20:60:b2:
c0:05:e4:db:3f:34:2b:5b:b6:21:a7:ee:f5:fa:f0:
24:45:73:1b:f8:de:0f:04:c2:d7:d5:7b:fc:38:08:
43:8b:f2:69:69:da:13:af:de:f4:65:41:be:ad:9d:
a5:94:08:c0:3c:bc:00:69:15:d8:bb:80:12:27:79:
32:06:9d:4b:7c:57:51:71:e0:17:8f:48:66:82:1c:
06:0d:e0:49:12:e2:ad:97:32:e3:be:be:12:1f:04:
a4:ef:a9:12:de:76:24:c2:b6:da:ca:f7:1c:b9:4e:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:F2:89:C8:D4:CF:7A:4B:59:78:83:E8:35:CE:73:F2:B0:6B:7A
X509v3 Authority Key Identifier:
keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/873B172AA46611EFB7561648C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ca:b5:d2:63:fe:71:b7:b4:de:c9:18:77:72:0b:67:5b:8e:
47:74:5d:88:e0:63:17:c3:12:28:f6:99:fb:7b:b3:77:da:02:
6d:df:34:ae:09:d8:16:71:f2:48:02:8c:33:89:45:54:3a:f5:
f2:d4:c3:ea:2e:eb:3e:f8:29:05:69:48:4c:7f:db:27:8e:02:
3c:5a:dd:63:30:52:fd:23:18:77:1d:f0:4f:d8:0a:94:67:42:
98:36:bf:85:c5:7d:6b:5c:01:d3:39:78:a6:cd:ec:e7:09:7a:
09:31:19:73:b4:0c:d8:5f:be:8d:cb:37:68:c0:69:61:06:27:
aa:39:bb:6e:73:00:ea:d0:17:61:6a:91:2b:bd:79:29:75:95:
27:38:90:e9:e8:00:c9:1a:4c:2a:32:d2:88:07:87:c7:54:d8:
03:22:a9:ee:48:13:0d:c7:78:c1:43:eb:b5:8d:da:6e:be:31:
aa:67:20:ee:2b:5c:f2:35:79:bd:79:93:4d:10:ab:de:a3:98:
57:45:93:a3:24:4b:42:d2:85:49:fd:15:c9:92:b8:72:43:d9:
67:1e:30:ee:f8:a8:ea:ca:5b:97:70:51:16:83:98:df:5b:02:
26:dd:fd:e3:df:6a:99:26:62:f5:9a:87:7b:90:9c:91:21:1b:
6b:21:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:16:08 2025 by rpki-client