Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/014E44B0553D11EBBF79C170C4F9AE02.roa
File: 014E44B0553D11EBBF79C170C4F9AE02.roa (raw, json)
Hash identifier: Fpbt0/DaM2WSD091MXPm9k1GM9XsXh3aSlmbyUJEp4U=
Subject key identifier: A3:CF:29:12:C7:1E:D4:C3:90:9D:D3:93:7F:F1:9F:6C:34:CB:AB:F1
Certificate issuer: /CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C
Certificate serial: 067D
Authority key identifier: C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/014E44B0553D11EBBF79C170C4F9AE02.roa
Signing time: Sun 24 Nov 2024 22:00:49 +0000
ROA not before: Sun 24 Nov 2024 22:00:49 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 209650
IP address blocks: 103.144.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C0C5
Validity
Not Before: Nov 24 22:00:49 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6743a211-a25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:88:70:be:12:53:a7:d3:45:96:41:4f:8b:
55:50:66:dc:89:f5:41:1b:29:bd:f5:89:91:6d:da:
9c:98:c4:de:ff:f8:9e:b9:0a:30:04:6f:a3:46:3d:
5b:61:12:bf:a8:1a:95:f5:dc:ae:e1:e8:ff:f9:8e:
41:b0:90:ab:e6:92:3c:3d:b2:f4:af:f5:d3:ed:81:
10:42:10:01:01:92:80:83:82:b2:0d:6e:5d:8b:88:
99:44:d9:79:66:56:ec:23:4c:7c:8e:dc:59:5a:a3:
14:37:f9:d0:e5:5f:ae:86:25:d2:42:cc:a2:17:7b:
c3:12:9b:1b:c8:31:be:6d:4f:7e:ba:fa:46:9e:06:
37:d5:b8:de:69:0d:f8:4b:97:db:eb:5a:e2:d6:04:
0a:57:8b:ec:a1:65:59:4c:e7:11:32:f0:eb:07:32:
5c:57:22:f4:2d:f7:fe:77:bd:13:50:ab:96:cf:ee:
6b:b0:d3:62:54:ff:cf:0d:c3:86:e3:32:ca:61:b1:
b3:a3:24:f7:c9:cd:04:1f:82:8a:c9:08:47:2b:82:
d5:54:74:58:26:d0:cb:5b:8e:c1:76:04:5a:eb:ec:
a9:be:ab:d9:58:5a:01:09:ac:e7:9d:b9:88:1e:9a:
6d:7c:0d:14:ef:bd:75:71:89:e7:41:91:67:fc:84:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CF:29:12:C7:1E:D4:C3:90:9D:D3:93:7F:F1:9F:6C:34:CB:AB:F1
X509v3 Authority Key Identifier:
keyid:C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/014E44B0553D11EBBF79C170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e1:d8:ad:e9:76:c9:58:bc:40:72:5f:4b:ec:64:63:04:38:
60:a1:bf:2e:e1:c0:50:dc:ff:dd:34:cc:8d:de:3e:3f:af:cc:
55:b9:e3:01:2a:c2:82:b8:ff:a0:fa:8e:d7:0f:64:40:91:61:
26:c0:30:a7:e7:89:d1:6f:5c:15:1b:87:fe:b6:22:34:27:0d:
86:6e:07:63:b6:33:32:8d:88:b3:3c:17:b8:8d:52:52:8e:4d:
97:43:a4:de:eb:b4:8d:43:8d:09:04:ac:4e:ee:88:70:5d:d2:
9b:6a:8a:2f:f6:43:cd:ef:69:e4:15:93:b0:80:74:cd:a4:88:
1f:41:dd:91:21:8e:ec:46:cc:76:80:0d:a9:7e:aa:89:89:92:
71:ce:5e:c1:da:ca:9d:7e:4c:0e:5c:e2:9b:d8:5c:83:de:17:
e5:46:5d:bc:d8:51:cd:22:f1:fc:df:e6:61:ea:0c:6b:26:80:
4d:07:8f:ef:e7:3a:14:5c:5b:88:9b:b9:4d:8b:32:a3:1f:47:
5a:d3:f3:57:a1:a9:74:48:e7:35:8c:17:7d:d2:37:e0:ab:a3:
61:eb:cc:c9:77:95:72:12:10:2d:f5:02:d4:96:07:f1:32:dd:
69:93:73:2e:e2:8f:ba:e2:65:1b:d7:a1:01:51:b7:53:9e:8c:
33:93:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:43:17 2025 by rpki-client