Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/788169BE3AAC11EBBEE1E81AC4F9AE02.roa
File: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (raw, json)
Hash identifier: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=
Subject key identifier: 3A:1E:FC:19:09:6C:A1:B3:98:C4:CC:33:63:E6:56:E5:44:22:98:2F
Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial: 06FD
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/788169BE3AAC11EBBEE1E81AC4F9AE02.roa
Signing time: Sun 16 Feb 2025 22:50:28 +0000
ROA not before: Sun 16 Feb 2025 22:50:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138336
IP address blocks: 103.160.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DD44
Validity
Not Before: Feb 16 22:50:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b26bb3-4c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:5e:a5:0b:db:ea:56:f2:c4:22:b8:b4:6d:
25:c7:6d:ca:7e:d0:a4:f9:ea:3a:9b:51:bd:67:e2:
4d:4b:24:b9:b6:80:b4:2a:3b:70:19:65:b2:c0:f7:
75:d6:34:d7:0a:22:40:6b:6f:5d:1c:2b:94:de:71:
2e:9e:3c:c0:71:93:09:16:41:02:1f:f2:ed:c3:ac:
91:82:66:28:8d:4e:e0:78:12:05:4d:7f:c0:d6:58:
ae:96:0a:ea:fe:4d:76:8b:ef:94:c4:30:65:a2:39:
e9:5c:cc:9f:e6:7d:8f:a4:41:83:72:37:9d:75:76:
b0:73:ac:ee:a4:11:bb:8a:e0:40:ae:9d:df:0e:dc:
e5:a1:38:a7:d9:6c:23:1d:00:15:09:d3:a7:ee:47:
8d:b9:d9:6b:63:0e:4c:c4:84:3e:6d:29:fd:f5:82:
91:3c:0a:35:13:db:87:54:27:41:bc:cc:2a:bc:d4:
c6:7d:38:d4:e4:47:72:b4:b6:b0:53:90:e9:7d:5f:
40:9e:f7:b0:ab:2d:2c:93:44:0d:0d:c1:11:92:8f:
ae:e7:34:8b:56:73:07:b3:0a:65:af:ac:9f:40:25:
e3:69:e1:50:79:0b:52:1a:46:98:93:c0:a7:3b:1a:
82:c3:ff:d9:58:32:c3:d4:4e:3e:e4:4b:30:fa:fe:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:FC:19:09:6C:A1:B3:98:C4:CC:33:63:E6:56:E5:44:22:98:2F
X509v3 Authority Key Identifier:
keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/788169BE3AAC11EBBEE1E81AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.17.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d5:6e:e7:4d:3d:14:c2:f9:f3:c1:02:dd:7a:7d:0a:df:0d:
45:74:50:89:f0:31:23:58:24:1a:31:3d:8d:a1:67:55:14:16:
07:d7:fd:3a:83:66:cd:84:08:7e:6f:12:36:e2:74:4e:5a:fc:
75:97:64:c1:fa:3f:af:8e:4f:0c:3c:d4:bf:fe:22:ae:73:d9:
85:97:3b:ff:9e:ce:5a:20:7d:ee:2e:0d:9e:2f:53:9b:21:6f:
92:91:9f:45:79:34:d4:c1:01:cd:d4:8a:7d:9b:d0:f6:57:29:
09:ec:fd:e7:79:b8:b7:84:be:41:77:63:1d:a0:33:f2:de:5b:
cb:a6:a7:f1:8e:2c:ab:a8:48:82:53:e7:bf:06:b3:58:d3:a6:
1b:41:d6:8c:d5:fc:f4:39:b1:95:5e:0b:26:1c:07:33:fd:45:
c4:46:d2:c5:23:20:8c:ed:ef:7a:01:2d:08:bf:19:da:5e:ad:
cf:a4:da:0a:b5:f8:89:e0:95:f2:93:dd:66:ee:f3:b6:e3:64:
ad:8a:49:06:c7:2d:15:84:62:f8:b1:7e:b2:90:a0:c6:55:dc:
c3:53:d9:b8:e8:61:03:ae:0b:af:00:98:e0:28:0e:d7:ff:de:
2a:06:e9:a7:3a:28:47:68:9f:22:09:90:fb:32:20:c5:8e:61:
e9:9a:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:27 2025 by rpki-client