Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
File: 459A5D3EB10F11E5A010921EC4F9AE02.roa (raw, json)
Hash identifier: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=
Subject key identifier: D1:61:75:57:9A:92:DC:44:BA:C7:5F:89:8B:BA:4F:07:BA:C3:B4:E9
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 22E8
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
Signing time: Tue 10 Sep 2024 16:23:18 +0000
ROA not before: Tue 10 Sep 2024 16:23:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 201755
IP address blocks: 103.15.170.0/24 maxlen: 24
103.15.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8936 (0x22e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93
Validity
Not Before: Sep 10 16:23:18 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e07276-be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:ef:38:38:99:3b:a7:b4:a6:b7:8c:b0:04:
8e:3c:65:60:27:a5:85:7d:41:93:72:92:ce:ca:52:
37:56:a7:bb:eb:81:6e:bd:df:8d:4b:8e:89:27:b9:
6c:df:2f:bc:db:7c:fc:59:ad:29:1d:a3:da:07:c1:
06:7f:ae:58:2e:44:b6:45:b8:d0:4c:76:b7:31:bd:
41:5e:f9:7e:2e:63:09:12:f0:66:5c:b1:b1:b0:88:
ee:09:b4:6c:e5:24:69:2e:1d:28:82:e8:48:43:ab:
ac:4d:75:25:e8:e7:b9:bf:d5:18:df:f9:4c:58:19:
10:07:8f:c2:6d:b4:11:22:6c:b8:27:7f:03:de:76:
de:a0:66:16:1e:ba:d0:77:c3:2d:e6:1c:af:9e:68:
24:fc:86:fd:99:f0:32:f3:43:db:4b:e3:4c:01:a3:
ad:4c:99:d2:f7:4b:ad:f5:d5:34:ff:5a:60:29:2f:
62:65:59:df:b4:56:61:ca:e3:35:7f:fa:c1:cc:65:
d2:8a:47:23:4a:25:3e:6e:c7:6b:97:15:a2:8b:4d:
ea:13:b8:12:73:80:b4:56:c3:c1:57:86:33:3a:75:
6e:2a:83:a2:8c:75:31:14:33:69:0a:fa:1d:63:87:
f8:8a:ac:d1:a0:25:57:a7:58:2c:09:28:63:11:18:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:61:75:57:9A:92:DC:44:BA:C7:5F:89:8B:BA:4F:07:BA:C3:B4:E9
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/459A5D3EB10F11E5A010921EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:82:91:7a:47:ca:12:07:ff:8a:4d:77:03:e8:71:76:30:e1:
d4:ca:f4:5e:0b:a2:75:b6:32:76:80:d6:bf:47:36:07:f8:18:
6d:63:9f:c6:ca:11:fe:57:47:b3:a2:98:fb:36:6d:15:c2:81:
5c:63:30:38:7a:2e:46:69:d3:dc:7b:ff:8b:66:c2:4d:a9:a9:
8e:81:fa:3e:3b:4a:89:09:14:f8:76:d8:a6:97:c7:3f:d7:7a:
59:64:e2:13:72:34:03:5a:cd:49:23:6a:be:3a:89:d5:c8:f0:
f9:1e:f6:8b:72:d9:5e:72:09:25:61:c2:7f:66:bf:af:5b:84:
fc:c6:d0:10:16:86:a5:b9:ca:04:a9:de:d2:91:9f:c2:e5:b3:
c8:0a:18:ab:f6:1b:8e:81:df:c1:fc:da:88:c3:30:53:9b:dd:
5d:21:0b:11:e3:2f:11:f4:8d:58:4f:43:6c:01:9e:7d:7a:0d:
ed:0f:dc:7e:ee:31:9c:51:af:f5:4e:9f:a8:a0:b2:d5:34:e9:
01:45:b4:1f:77:ce:ab:f9:81:91:f1:1a:ee:03:97:14:c8:3c:
b6:cb:b5:02:9c:e9:67:11:a8:b2:4e:5f:d4:4a:51:26:73:f3:
2b:88:70:42:65:5e:87:fd:60:c8:2f:28:69:9e:96:e0:97:61:
43:bf:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:29:34 2025 by rpki-client