Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
File: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (raw, json)
Hash identifier: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=
Subject key identifier: C8:4E:8C:56:5E:DE:CC:BE:9A:99:3F:64:47:A9:D2:1A:F8:08:87:A4
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 04D7
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
Signing time: Sat 02 Nov 2024 23:42:41 +0000
ROA not before: Sat 02 Nov 2024 23:42:41 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 24499
IP address blocks: 103.123.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3
Validity
Not Before: Nov 2 23:42:41 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726b8f0-b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:5e:90:7d:dc:b9:47:e5:0e:8a:6d:17:7a:
21:10:b9:9a:e4:32:f1:7e:7f:e3:02:6c:db:ce:4d:
f0:84:d1:7f:80:c1:6c:5d:f4:9b:9d:1f:f7:10:8f:
fa:bd:15:16:2a:42:f3:52:89:c1:b5:1b:42:e8:d8:
49:2a:e5:a4:29:e7:4a:c1:5e:63:41:3f:07:12:93:
54:9d:fb:ec:ed:0d:f2:dc:ba:3a:5e:c8:b2:20:28:
5b:b0:55:b2:bd:0d:63:32:8c:17:8f:c9:ba:28:23:
58:de:0e:5a:72:5e:d9:90:90:ed:5c:70:09:1d:9f:
6f:5a:ab:41:70:3b:c2:87:ad:0f:1f:d0:c6:6c:99:
d8:88:b0:a3:e0:2c:5d:2f:61:90:0c:3a:9d:51:af:
7b:62:ce:2d:a3:90:4e:f5:66:aa:c0:41:36:09:19:
ce:42:c9:8d:eb:02:1c:a8:c2:4c:6a:3c:b9:70:e6:
b9:fa:70:0d:2a:a1:a9:81:0b:13:54:78:7a:60:f1:
bc:2a:bf:2f:89:a3:cb:3d:c1:a7:a1:19:74:30:a8:
70:b1:69:d4:10:25:20:66:c6:bc:44:1c:24:bf:fc:
1d:7e:7e:66:82:28:fc:9c:89:de:b3:eb:9e:b8:90:
c7:52:89:2f:c8:09:77:2c:b7:3f:23:65:ce:d6:f9:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4E:8C:56:5E:DE:CC:BE:9A:99:3F:64:47:A9:D2:1A:F8:08:87:A4
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:67:d1:e6:a2:c5:c7:b0:76:2c:3a:16:a3:ef:41:46:67:fa:
dc:ba:74:e0:59:17:16:e7:9b:f5:31:16:a6:1f:50:af:fa:fc:
9f:e0:bc:6e:4e:0d:14:30:dc:3d:97:8a:3d:7c:a4:9e:89:65:
cf:70:6d:19:87:c5:92:bf:0c:94:ac:67:0c:5a:8d:5a:0d:20:
2d:59:e9:94:fc:e5:14:db:5a:19:65:e7:49:ad:96:11:56:0c:
2c:7c:56:2e:d9:cf:f6:c5:6e:f1:12:77:f9:e5:cf:a8:b6:c0:
18:f6:67:84:dd:da:11:cd:0e:95:b7:0f:68:f5:55:a0:2c:6c:
2e:51:b5:bd:93:bb:fb:fb:54:00:e0:0c:64:05:ee:08:80:d4:
28:86:ed:75:af:22:13:a1:be:c3:19:99:4b:21:74:3a:7d:15:
67:93:68:74:a3:fb:84:73:e6:8c:df:b0:ad:05:22:6c:29:46:
d8:c7:ca:94:5f:5e:b1:65:a6:1f:9e:d0:97:9b:f2:42:29:e7:
49:60:9a:cf:2a:be:e4:85:eb:15:b9:b5:fb:df:8a:a6:2d:65:
82:18:85:34:59:82:b7:9e:ff:20:98:1c:6a:54:ba:70:17:ad:
6a:58:2f:52:1c:ff:5b:5e:7a:3d:96:90:f5:f8:ec:b2:4c:b7:
4a:b0:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:52 2025 by rpki-client