Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/497917BA719B11EEA5D8F416C4F9AE02.roa
File: 497917BA719B11EEA5D8F416C4F9AE02.roa (raw, json)
Hash identifier: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=
Subject key identifier: 7F:36:08:CE:72:91:26:0A:73:C8:3C:4A:2B:98:A0:0F:1A:29:F7:9F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: DD
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/497917BA719B11EEA5D8F416C4F9AE02.roa
Signing time: Tue 03 Dec 2024 04:07:48 +0000
ROA not before: Tue 03 Dec 2024 04:07:48 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 20473
IP address blocks: 103.67.70.0/23 maxlen: 24
2001:df3:dc0::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3
Validity
Not Before: Dec 3 04:07:48 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e8414-9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:f2:46:7b:d1:7e:3b:f9:f4:35:9a:96:23:
a3:38:5a:be:7e:ff:9d:82:7c:41:5d:55:e2:c9:f6:
1b:7f:22:1a:07:62:77:20:cf:4b:7d:f3:f4:60:a3:
58:7a:30:79:da:42:b1:d8:0b:b7:8a:79:76:9f:1f:
a3:d0:72:f2:0f:5a:18:52:1d:25:70:b5:a0:d5:9c:
82:94:61:34:1f:33:08:64:1c:70:6a:fa:55:c9:c2:
ae:fb:4b:f6:cb:15:89:30:73:7d:b6:5c:3a:e0:09:
80:99:aa:30:8d:04:54:90:2f:9e:88:a0:9c:0b:e5:
16:f2:19:98:fa:26:8f:a9:f8:b5:fd:5d:25:59:9a:
a0:91:13:74:67:fe:8e:a6:56:f9:f9:87:89:c0:83:
f4:88:e4:ac:80:6d:fc:cb:27:1f:e5:e0:ea:b2:e4:
56:b7:a9:04:d9:d8:1f:11:99:82:53:06:34:af:f2:
f6:c2:32:86:c5:e8:56:92:d4:78:af:22:29:1e:55:
0c:41:62:34:f8:85:44:d9:a6:0d:e0:2f:89:98:cd:
9a:c6:5b:a8:73:18:4a:d2:5d:c4:4c:43:6a:4f:8a:
db:50:d6:85:14:09:8c:b5:54:be:5d:e6:d8:60:50:
ac:ce:1b:22:4d:47:00:22:8c:2d:40:fb:a4:d3:ab:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:08:CE:72:91:26:0A:73:C8:3C:4A:2B:98:A0:0F:1A:29:F7:9F
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/497917BA719B11EEA5D8F416C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.70.0/23
IPv6:
2001:df3:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
21:87:14:f3:dd:8b:5b:96:f4:2e:ca:30:c8:ae:c5:cc:05:d6:
4a:b1:e7:1d:a8:99:52:04:8a:47:75:e2:3f:1c:dc:7c:13:b5:
1b:f2:c5:68:9f:b0:20:16:7e:19:fa:10:62:13:35:ae:96:07:
11:a7:b4:43:46:f2:8d:9f:5d:56:3b:2b:0a:8b:50:31:03:5b:
26:26:5d:65:74:0d:f3:da:b2:96:02:46:e1:b1:e2:cb:60:54:
60:90:e6:01:36:a3:1a:cf:3f:33:9f:50:47:c5:38:22:3d:cc:
37:20:20:e2:80:b1:29:26:bc:2c:56:56:e7:25:36:d4:05:0e:
c7:1c:c3:1d:f5:cc:09:fc:fc:30:cc:b5:ba:18:0f:8b:bc:6e:
b6:af:05:40:3a:1e:0f:79:f2:dd:b8:63:58:87:ae:f1:06:1a:
d8:48:e9:23:67:14:47:aa:e1:a8:25:31:d2:48:33:d5:62:6f:
7c:c7:5e:4d:60:f6:5a:6b:a9:17:c7:b0:3f:0f:58:b7:97:72:
5a:86:c7:ab:c5:da:c9:cb:91:d1:b1:ae:d0:33:92:3f:0d:30:
db:cc:82:43:47:03:b7:c2:94:5c:38:05:30:82:b0:b4:a8:d2:
f8:71:8a:69:67:21:ca:ff:8a:ed:17:f9:cc:bc:29:29:2e:7a:
df:4e:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:21 2025 by rpki-client