Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
File: FC45B5BE63A911EF954C7983C4F9AE02.roa (raw, json)
Hash identifier: vrCV2cvfB8WdbRn0Uoy+kWpWz93WOhrgMiccdZKbwQ0=
Subject key identifier: 73:D2:CB:EB:A0:D8:57:57:49:F1:BE:44:9E:A7:14:70:B5:54:41:9D
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 14C6
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
Signing time: Mon 26 Aug 2024 12:52:00 +0000
ROA not before: Mon 26 Aug 2024 12:52:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150001
IP address blocks: 103.114.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5318 (0x14c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000
Validity
Not Before: Aug 26 12:52:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66cc7a70-5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:c0:cc:6f:65:fc:85:5b:73:fe:e2:09:22:
92:fc:ab:18:db:5c:6e:51:16:54:ec:77:05:04:01:
98:d6:ad:47:64:a1:b6:40:14:19:39:0e:ad:2e:ae:
2c:e3:e6:d1:de:ec:bd:98:05:a7:15:66:53:0f:07:
07:1b:51:b7:cc:f5:e5:22:d0:ad:12:07:ec:50:e6:
a9:9a:be:1a:b1:4b:f4:83:eb:b8:d2:ca:2d:ce:45:
ed:47:07:3e:07:5b:28:df:2e:2c:c8:e3:1c:ef:28:
99:49:00:00:27:e8:3d:94:4d:18:a0:e6:c8:a4:e3:
1c:30:37:e3:30:35:09:1b:5e:0b:da:70:66:08:8f:
1f:2d:0b:c2:4a:b4:98:6e:d7:9f:61:98:96:66:d5:
75:b4:c3:34:5b:b4:d5:4d:14:68:21:0b:57:c1:8b:
0a:0c:cd:21:b6:82:61:7e:ab:d4:db:fa:14:49:48:
3b:dc:79:83:8f:dc:e2:6c:72:23:5f:a8:f7:d6:e9:
d6:b9:3e:fa:32:f9:b8:96:e4:47:f2:46:86:1d:14:
08:ad:cc:89:35:3b:cb:6d:24:84:b9:e7:fd:59:74:
ba:2f:7f:f7:2a:76:2a:95:8c:4d:2c:f8:64:76:bc:
69:1a:fe:d8:0d:63:73:c1:16:88:5d:6a:e1:e6:da:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:CB:EB:A0:D8:57:57:49:F1:BE:44:9E:A7:14:70:B5:54:41:9D
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/FC45B5BE63A911EF954C7983C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e5:8f:85:d0:11:5d:9c:0d:24:35:9e:52:fd:e4:24:67:0c:
7b:6b:02:33:cc:3c:92:c5:ac:48:31:58:76:db:d3:e9:a3:89:
bb:ad:5f:2c:37:ce:27:7f:35:bf:88:71:e0:28:d7:8b:85:60:
ba:6b:94:d1:d2:38:d0:3f:b7:37:9d:1b:1a:6d:79:fa:42:a2:
41:33:f5:8e:ca:1f:35:b9:9f:d6:29:ac:a6:c1:30:8b:d8:c1:
49:8a:ca:ea:c0:e3:54:82:68:48:1c:c2:31:40:8f:bc:6f:57:
3c:37:97:44:da:34:55:7d:fa:d2:77:65:3e:48:e1:7f:d0:ba:
0c:4c:5e:aa:81:37:e6:fe:99:23:51:c0:0b:9e:cc:07:fa:71:
b1:5a:9a:c0:99:4f:60:35:a6:9f:9f:0b:0e:a7:36:fa:a5:06:
a6:24:0e:f8:4a:4e:4e:43:53:ec:17:8a:87:7a:56:b5:92:aa:
bb:26:66:67:3c:6d:ad:fe:84:54:c9:a7:71:60:34:6e:4f:82:
9b:ba:b3:35:27:e2:50:fd:9e:d9:c3:55:55:51:c3:56:14:9e:
57:39:55:80:9b:22:49:e7:b5:08:a0:fb:32:dc:bb:79:79:ad:
1e:0d:ef:de:15:e0:25:2a:a9:49:bd:35:34:25:aa:23:10:5f:
68:6d:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:02:57 2025 by rpki-client