Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
File: F7ACA074DC3F11EC8323B460C4F9AE02.roa (raw, json)
Hash identifier: pktrHR+QS/er0s+loh1K6z6/oPCthVtEcSW6fBSWLVw=
Subject key identifier: CE:C1:3E:B1:40:21:89:8F:F1:D2:01:85:22:C0:01:B1:1E:E3:0A:70
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 024A
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
Signing time: Wed 19 Jun 2024 04:15:21 +0000
ROA not before: Wed 19 Jun 2024 04:15:21 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137526
IP address blocks: 103.186.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54
Validity
Not Before: Jun 19 04:15:21 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66725b58-9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:8f:5d:37:be:23:41:ec:ee:1c:d4:13:58:
22:db:1e:8c:73:4d:78:1f:18:06:39:05:65:3d:ac:
18:27:27:60:07:43:50:aa:e7:c2:9e:66:58:5a:ed:
59:27:49:6b:ac:df:f9:62:fc:14:52:49:19:9c:bf:
a2:b1:02:8c:2e:9a:9d:65:a5:f6:60:c6:b6:4a:39:
d2:8e:e3:ad:30:4c:9a:e6:4b:50:58:fe:b6:bf:85:
2e:9f:b6:27:8a:36:aa:2d:63:88:2b:1e:0f:ec:53:
78:fd:b6:1a:c3:29:5b:3e:09:a5:ea:06:b2:de:38:
c4:25:d5:af:32:32:3f:04:62:c0:36:56:e0:87:aa:
57:29:c1:c4:55:ab:1e:5c:83:b3:19:83:6e:a3:7a:
04:bf:46:9b:df:6c:31:ef:ad:a4:77:d4:e6:7d:98:
2c:05:64:1e:15:ac:2a:af:a5:8f:de:6b:9b:9e:e5:
79:e0:1a:99:68:61:e2:c7:d7:1c:71:4b:b0:5b:e3:
8a:27:85:79:57:7f:74:91:ef:c9:83:b2:ba:c0:cb:
e7:92:80:f9:93:0c:ad:8f:4d:22:aa:d5:40:df:24:
6f:61:c1:61:9b:bd:49:e9:dd:3a:17:8f:a2:1a:83:
ce:f1:d5:31:9f:b9:fc:a8:95:0a:a0:53:7a:78:d8:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:3E:B1:40:21:89:8F:F1:D2:01:85:22:C0:01:B1:1E:E3:0A:70
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b6:ef:71:36:ef:17:b2:a0:e9:5c:fc:69:41:52:37:17:50:
6e:d0:f9:b5:9c:e3:d4:90:09:ce:f3:f6:b6:ae:bb:92:b8:8e:
e9:83:63:0c:39:c6:44:66:ab:5d:f1:7c:5d:54:08:13:19:9f:
19:c8:f2:b3:13:b6:ee:6e:a8:5b:2e:cc:f4:4d:1a:78:88:9f:
c6:e2:d8:31:7f:6e:96:94:b5:e9:3f:e4:ca:47:29:72:3e:1e:
56:15:77:10:72:6c:35:3a:e4:74:51:92:9e:08:3c:81:30:36:
88:a8:dd:05:86:bc:41:dc:46:5f:f8:cc:82:dd:7a:77:c7:7d:
d8:04:90:74:e8:5d:e3:63:9d:5c:22:af:0e:e6:4b:3f:3f:59:
0c:ed:c6:c9:bb:74:2c:d4:a7:a1:7e:11:4d:44:fe:2f:a1:78:
45:b3:80:06:94:f5:23:01:8b:7c:62:08:1d:a8:5c:56:74:da:
27:6b:45:cb:73:b0:7b:d1:ba:03:45:48:44:a5:32:d2:76:73:
b8:97:bc:db:05:b4:27:14:3f:c0:1a:8a:f6:e7:10:c1:99:b6:
73:44:ff:28:2f:00:73:45:f9:0c:d6:6f:05:0c:aa:20:f7:e1:
83:a5:93:92:aa:7e:3d:70:54:d1:15:2b:eb:da:d2:53:84:96:
86:e0:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:20 2025 by rpki-client