Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json)
Hash identifier: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=
Subject key identifier: FA:D6:41:95:77:4E:4E:B6:37:F3:D7:3E:E9:6E:39:BC:91:76:53:E7
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 0224
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
Signing time: Fri 21 Jun 2024 03:14:14 +0000
ROA not before: Fri 21 Jun 2024 03:14:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140646
IP address blocks: 103.189.212.0/23 maxlen: 23
103.189.212.0/24 maxlen: 24
103.189.213.0/24 maxlen: 24
2400:88e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F
Validity
Not Before: Jun 21 03:14:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6674f006-e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:47:75:8b:fd:76:a0:a9:55:36:57:14:fb:
70:95:f1:67:e1:c7:4f:53:0d:ff:26:fa:31:44:7c:
9c:d5:e4:b4:b9:de:df:c2:ce:9a:91:7c:43:ee:aa:
ea:2a:e2:e0:90:78:52:72:5c:3d:0d:2e:a2:35:70:
79:21:94:98:df:48:15:e9:1a:81:b1:04:98:92:02:
15:e8:95:18:04:61:25:da:20:c1:7d:68:d2:fc:0f:
8d:65:2d:cc:80:d8:93:3d:49:6d:51:0b:0e:3c:ab:
b9:da:65:4a:30:70:16:c5:e3:1f:2e:7c:cb:ed:69:
82:35:12:d5:09:02:b2:46:cd:e5:5e:f8:25:2f:9a:
50:50:72:b9:58:37:15:2c:6b:ef:de:bc:cb:be:dd:
42:65:a9:ff:e5:d1:34:c4:a4:39:55:1b:93:91:1c:
21:e7:63:33:ac:30:c8:e5:f3:af:4f:81:c6:55:77:
3a:8d:7b:c0:98:24:08:86:a0:ce:e3:b2:e2:31:86:
89:85:10:6e:2f:ab:ff:6c:e0:f3:e7:d8:bd:1e:2e:
63:53:c5:85:71:28:3b:ca:dd:5e:e3:81:42:25:d6:
bb:86:cf:8f:9c:11:1a:2c:9a:29:88:a9:fc:86:b9:
d5:4d:cc:13:d1:14:73:d3:29:bd:56:e7:c7:9d:90:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:41:95:77:4E:4E:B6:37:F3:D7:3E:E9:6E:39:BC:91:76:53:E7
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.212.0/23
IPv6:
2400:88e0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:5a:0b:c3:c9:27:7a:a4:20:9f:ed:86:8a:62:8f:2c:c3:03:
2c:23:d0:93:9c:33:2f:1f:06:5d:de:62:38:3c:fd:26:df:1c:
d0:b1:da:7c:18:f2:a9:47:13:a2:68:84:ba:bd:bb:a8:76:ba:
bd:a3:24:63:85:7b:b2:3a:31:84:0d:7e:80:8c:1b:c1:04:b9:
5d:78:4d:5c:c7:6e:dd:1b:d0:ad:b4:fb:ab:98:53:02:a8:cd:
8f:ce:84:af:8d:9f:b8:4a:64:94:61:e7:10:53:c2:5e:93:62:
dd:a7:3d:92:37:f8:e7:db:1d:18:fb:b9:b6:af:bc:20:ac:02:
54:25:dd:68:69:20:96:15:18:f3:b4:2d:90:fa:b1:94:76:6a:
6c:fe:a6:ac:98:6f:9b:7a:34:50:4a:c1:1a:19:ba:91:b0:93:
18:ac:55:4a:a2:57:ce:d1:e8:9f:cd:5c:c1:df:c2:13:e4:7e:
e6:0b:6c:8e:7b:e6:54:4c:7f:65:5f:84:04:77:b7:7a:f1:3b:
4d:88:96:25:15:e8:5e:6a:36:d9:35:59:6c:e5:59:4f:e7:29:
3c:2f:42:82:5d:5a:eb:15:88:c6:7b:6a:7e:47:96:e2:65:21:
22:fe:eb:b3:85:c1:9a:68:f8:d8:e7:94:23:b6:1b:bd:cb:25:
3a:a9:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:26 2025 by rpki-client