Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa
File: C355C10243E611E8843B4E66C4F9AE02.roa (raw, json)
Hash identifier: H1/wMzuuXXUoNuPK1c3O8xbMg0+A7svPlNNuYm9uqvk=
Subject key identifier: B1:10:87:CA:49:47:C0:2E:79:B2:D7:30:15:63:EE:3D:A2:A2:2C:D4
Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
Certificate serial: 147D
Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa
Signing time: Tue 28 May 2024 17:56:00 +0000
ROA not before: Tue 28 May 2024 17:56:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137572
IP address blocks: 103.113.224.0/22 maxlen: 24
2402:c440::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5245 (0x147d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C233
Validity
Not Before: May 28 17:56:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66561ab0-fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:70:00:e1:85:b3:66:28:44:c3:b8:27:01:
34:68:05:cb:49:bb:c4:f9:08:d3:f5:d2:29:60:47:
ef:93:29:49:6a:09:48:c6:a1:1a:16:73:45:2f:59:
75:e5:3c:bd:6c:ef:b9:00:d4:6a:8f:bb:d6:51:67:
fc:1a:bb:c7:34:05:61:68:2b:d3:f5:2d:0b:a7:6f:
df:03:74:fd:cc:e3:ee:09:7c:81:6d:c6:d5:18:75:
df:00:b5:fe:9b:a8:a1:30:73:ab:f7:c0:8d:9a:51:
f6:21:0f:32:5f:03:5b:8e:fb:b9:a7:fb:c0:fb:31:
11:45:65:ed:96:28:89:b9:49:62:67:e4:9b:c7:63:
d7:83:71:8e:5d:2b:45:95:3e:6c:f7:0f:69:09:f9:
ef:db:af:d0:7b:74:3a:41:f1:c9:69:65:60:93:05:
6d:3a:98:74:8d:18:13:99:e0:47:02:47:64:f6:7b:
ac:6b:d5:d2:19:66:df:91:82:a1:30:87:1d:20:48:
a6:02:ef:1b:92:a6:8d:a6:d6:27:9f:09:d5:37:80:
7b:d7:b9:2f:cd:b1:9f:5d:ef:1f:f6:0a:4e:14:ca:
ce:f7:ee:00:fb:f7:f6:33:60:8c:5c:41:53:ed:23:
88:ac:27:92:5e:97:a9:28:ac:08:05:ae:ea:79:e4:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:87:CA:49:47:C0:2E:79:B2:D7:30:15:63:EE:3D:A2:A2:2C:D4
X509v3 Authority Key Identifier:
keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.224.0/22
IPv6:
2402:c440::/32
Signature Algorithm: sha256WithRSAEncryption
69:29:d1:6d:2e:62:47:43:6c:fb:0b:d3:cb:a6:4d:c6:03:c4:
b2:d1:f6:1a:2d:4d:b6:b8:13:70:80:c9:47:15:8d:3e:31:94:
1e:22:55:23:69:86:66:ae:30:c4:04:fe:36:6a:e8:35:36:30:
98:63:c4:e8:09:9f:46:0d:e3:f2:41:58:42:bf:29:39:46:01:
83:42:aa:64:72:e9:80:f4:29:76:6f:db:27:b2:ef:a4:4d:e2:
17:e8:a3:b4:3f:4f:9c:9d:58:e9:11:e5:2e:79:e5:b3:d2:fa:
4c:25:95:67:62:b4:39:47:d1:d7:37:7d:6a:30:d4:7b:ab:1c:
99:fd:9b:67:bd:a3:22:3d:85:99:07:6b:31:17:7a:97:de:bb:
7a:99:18:94:8c:e1:06:8d:25:07:18:41:87:1c:18:a7:85:da:
6f:ae:70:a0:b9:8b:8a:cd:0e:e9:43:46:5b:9f:6f:69:62:9a:
43:7d:6f:5e:b5:c0:0b:ce:6a:1f:1a:9e:56:a4:20:3a:e5:14:
e8:44:c0:63:bb:fe:0b:6d:f8:75:87:41:96:a2:90:90:4a:1f:
ff:b5:cb:1c:9f:68:38:7c:b6:c0:8f:f8:f6:6b:9f:06:8e:45:
2f:97:b2:f3:72:59:01:0e:e0:e0:ed:a2:3a:85:47:de:a7:e5:
18:d1:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:19:23 2025 by rpki-client