Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
File: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (raw, json)
Hash identifier: 60Yp+lMUoIhBshIDeToO24NmKvWSdMqkdEQgOkXf8BQ=
Subject key identifier: B3:CA:D1:A6:BE:B5:8E:42:2D:F5:1E:8A:E1:9A:E4:78:6E:93:6C:AB
Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Certificate serial: 08C0
Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
Signing time: Sat 18 May 2024 21:30:45 +0000
ROA not before: Sat 18 May 2024 21:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147282
IP address blocks: 103.150.50.0/23 maxlen: 23
103.150.50.0/24 maxlen: 24
103.150.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C75
Validity
Not Before: May 18 21:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66491e05-3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:8e:a7:fa:f4:f5:71:59:ba:ea:f5:bc:4c:
cf:1b:71:43:8b:90:ec:ec:45:96:47:70:b5:ce:fe:
d8:5c:27:2d:d2:80:1f:e4:ff:df:30:44:df:b0:02:
c9:06:6d:a2:d2:8c:04:ee:a4:17:af:d1:69:15:37:
ab:6e:75:88:af:62:09:48:2b:72:6e:e9:f3:95:d5:
df:51:8a:1c:ca:e6:e4:8a:a7:77:ed:c0:3b:3f:48:
38:a8:36:5c:e3:7e:db:a1:ec:76:6f:c3:77:5f:fa:
d5:8c:e1:cf:db:10:91:89:da:db:73:70:ab:2f:ce:
cc:8b:04:82:7d:da:cc:b4:ee:5e:88:91:ac:30:db:
63:56:74:1f:6d:8a:f6:38:61:09:85:c8:ac:a5:ac:
af:50:79:57:25:89:c6:7a:80:06:85:d0:e7:07:79:
61:c0:11:4c:16:c3:53:4b:90:31:f3:a5:b3:7d:c5:
b0:94:1d:44:61:60:01:7e:cd:fc:1f:bc:d8:2d:93:
4b:7b:2e:c1:d9:40:6d:d6:da:21:d5:79:8d:b2:cd:
2a:c4:ba:3f:f6:08:b9:58:e0:be:2d:6a:55:cd:28:
62:c9:fd:f7:22:20:fd:d6:9b:49:18:9a:53:9c:1e:
75:40:0d:d9:09:16:51:36:b4:cb:d2:3c:76:06:57:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:D1:A6:BE:B5:8E:42:2D:F5:1E:8A:E1:9A:E4:78:6E:93:6C:AB
X509v3 Authority Key Identifier:
keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.50.0/23
Signature Algorithm: sha256WithRSAEncryption
44:72:6a:37:fa:7c:01:f4:aa:85:f5:3f:27:d2:cb:df:29:ff:
fb:39:94:14:25:39:d8:d3:60:1e:97:67:ce:1a:72:7a:27:5e:
c0:a4:f6:de:e0:bd:4a:9f:37:9e:3c:c9:83:dd:f6:6b:41:d8:
55:f5:44:eb:dd:9b:dd:3b:05:b3:df:99:8a:5b:a4:6a:f8:0b:
76:e1:94:58:20:41:e3:ca:71:c3:2f:27:7f:ee:36:7d:e5:95:
cb:a8:89:b6:92:72:79:7d:3f:5d:ef:db:39:1d:8f:48:68:b7:
b7:79:c5:d3:37:64:20:bd:d2:bf:59:f2:3a:90:49:19:9c:16:
94:ef:58:e8:8c:b7:3f:84:aa:bd:47:5f:a2:b4:f9:77:4b:38:
47:a5:88:51:13:11:4f:b6:e5:60:ae:22:67:cb:de:e3:5d:10:
d0:d3:57:5a:9c:d2:de:01:5d:89:c5:cd:8c:51:54:0c:b6:89:
40:5c:e4:31:10:f5:9d:6b:41:7f:98:14:30:5a:cc:96:01:d8:
e6:1e:dd:02:9e:96:eb:20:d5:75:74:f0:14:ac:af:66:00:b5:
4b:5e:3e:c5:a3:1d:12:da:34:dd:83:b7:55:f8:7a:bc:83:23:
2a:8c:55:e4:d7:2d:bb:c2:ae:6c:9d:36:9f:9e:38:95:b0:6f:
5c:c4:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:02:33 2025 by rpki-client