Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
File: DB4085480A3A11E999FA296FC4F9AE02.roa (raw, json)
Hash identifier: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=
Subject key identifier: D7:F3:0A:BE:20:DB:B5:5C:33:19:41:1D:F4:AA:A8:44:13:5D:A4:B1
Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial: 1111
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
Signing time: Mon 20 Jan 2025 17:25:21 +0000
ROA not before: Mon 20 Jan 2025 17:25:21 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45455
IP address blocks: 103.28.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4369 (0x1111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0F1
Validity
Not Before: Jan 20 17:25:21 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=678e8701-318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:1c:78:6e:29:c1:cc:18:c4:88:9d:02:2f:
be:38:6b:a0:67:8c:e8:ca:84:d3:95:4c:19:6f:d8:
7e:0d:fe:dd:b6:16:14:2e:46:7c:e3:27:dc:43:65:
c7:c3:10:84:33:d2:49:66:ac:6a:59:dd:e3:b3:40:
62:21:8b:50:89:d7:e1:e7:27:9c:f0:f1:8d:bb:31:
97:06:d7:8e:0b:67:a2:3c:16:74:63:e6:94:c7:51:
86:6d:96:ff:d9:26:88:86:0a:c3:c9:e7:cc:a5:9a:
d1:ad:e5:49:f6:cc:67:8a:06:fe:ec:be:db:7a:da:
79:58:f1:ec:64:82:a7:fc:9d:67:23:02:a8:c9:6b:
de:2c:5d:bb:ba:f9:7d:00:29:18:b4:69:80:e4:0c:
bf:f8:49:50:b3:a1:eb:f7:46:b3:41:92:9a:d6:51:
8e:f0:f1:72:1c:2c:f7:4a:6f:2e:96:d5:ce:6d:5c:
42:58:4a:e4:ab:cf:be:05:bf:3a:54:91:b9:2d:3f:
d6:00:54:ad:52:4d:22:d1:10:14:89:6d:df:2d:f9:
68:4a:ad:3f:53:36:b8:e5:40:e0:0b:a9:9d:98:9a:
af:19:f5:7f:a9:5a:cf:0c:c9:e1:c3:05:f0:7f:29:
6b:9a:fa:ac:23:e3:d9:29:a7:ef:bf:4c:bc:c9:d8:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:0A:BE:20:DB:B5:5C:33:19:41:1D:F4:AA:A8:44:13:5D:A4:B1
X509v3 Authority Key Identifier:
keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:15:8f:31:be:8f:c4:e6:f0:7f:46:5b:ff:68:d3:24:ab:55:
f7:73:e8:df:0e:10:9f:91:2f:0c:13:90:e6:41:3c:28:c5:c4:
22:c6:9b:a2:3c:7f:b6:ce:bb:c9:ed:db:ce:58:56:9d:95:d6:
4f:7f:f0:0c:a9:ed:2e:52:44:91:1e:65:af:ac:7d:92:54:24:
bc:5c:c0:4a:a7:d5:fc:82:13:a8:c7:69:d9:93:a1:fc:48:06:
7f:0e:c3:b2:60:87:61:3a:3b:b7:4e:3b:17:22:fa:2d:5e:71:
76:ad:4d:7d:b0:82:97:fe:98:20:d1:d5:fc:26:53:b7:e1:a0:
ab:91:fe:b0:71:70:66:41:a8:f9:c3:cc:2d:d4:1e:b1:7d:d5:
06:52:2f:2b:e0:f6:1e:08:b8:66:05:09:77:cf:c3:46:f0:97:
7d:f0:72:a7:ee:3a:a7:f9:2a:a9:c6:29:a0:25:85:2b:0f:8a:
a8:71:0f:8b:f4:e1:02:80:8c:91:24:c2:84:f3:70:88:27:55:
03:a3:38:e0:1f:62:20:49:ae:04:02:04:68:b6:6b:16:1e:30:
d4:08:bd:a9:51:d7:bb:96:24:30:19:6d:cd:17:19:d0:fa:7c:
1c:b8:4c:e5:d5:cc:58:58:97:df:25:0a:e5:e3:2b:4c:bf:b8:
e3:37:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:50 2025 by rpki-client