Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
File: 7659B89AADCC11ED84051211C4F9AE02.roa (raw, json)
Hash identifier: S0QCets6nYQwhXbRnwnSRy3OBYGEXLOm6h5sFxoClJ8=
Subject key identifier: 65:90:CC:FA:13:CB:50:8E:63:C3:5F:D7:A8:9A:3D:F0:5E:76:47:F4
Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial: 0170
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
Signing time: Wed 29 Jan 2025 02:37:00 +0000
ROA not before: Wed 29 Jan 2025 02:37:00 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139802
IP address blocks: 103.145.102.0/23 maxlen: 23
103.145.102.0/24 maxlen: 24
103.145.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0721
Validity
Not Before: Jan 29 02:37:00 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6799944b-0147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:7f:50:c5:ac:8b:46:52:92:32:95:7d:d6:
c6:92:7f:f4:19:d0:f3:a3:e7:d7:ea:98:3f:b6:08:
dc:af:4f:1e:d1:7f:01:55:a8:16:ff:10:65:f2:b9:
bb:b0:71:48:d8:5c:0b:4a:63:02:c1:d3:d4:0c:51:
1b:a2:53:4f:c2:27:69:54:5d:cc:b5:66:3e:a1:87:
97:2c:95:65:b9:bd:86:e3:ac:d4:f7:56:f5:c3:ee:
bc:a6:63:32:c5:7b:7e:66:48:ef:3a:90:e1:dc:e2:
e6:cc:3a:df:fa:c3:de:ba:d2:d3:9c:bb:e2:2f:c3:
9b:e9:6d:28:88:0d:00:9b:3d:73:6c:62:3c:72:76:
30:19:e1:3e:d6:b2:a9:1e:0c:9e:23:b3:6c:91:a5:
21:4e:b3:52:9c:58:91:d0:c4:f6:03:0b:cb:a7:ff:
22:aa:df:f9:c0:11:c0:ed:1e:41:34:bb:2f:f7:1b:
e8:ca:d8:8b:24:26:ce:60:17:dc:44:11:25:1d:d9:
ae:b7:ed:18:00:68:71:bc:b7:f4:7e:0b:55:5e:8e:
9a:34:5c:34:e7:d5:5c:4d:65:31:29:3f:5d:b0:2b:
94:89:34:70:cf:d1:8e:ea:02:41:fa:02:0d:2a:af:
e9:82:35:ed:0f:a2:72:7a:c5:87:1d:11:0a:f4:cc:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:CC:FA:13:CB:50:8E:63:C3:5F:D7:A8:9A:3D:F0:5E:76:47:F4
X509v3 Authority Key Identifier:
keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/7659B89AADCC11ED84051211C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.102.0/23
Signature Algorithm: sha256WithRSAEncryption
16:64:24:45:d1:26:d4:66:3d:4e:65:70:b2:ba:7a:37:07:6c:
a6:fb:46:ed:04:a8:2d:56:1f:60:9e:c4:76:8d:6c:92:61:e3:
7c:e7:13:81:f5:f2:83:10:3b:cd:06:cd:bf:6e:1d:12:cf:20:
fb:b3:93:cc:8b:f0:5b:b4:db:25:3f:a1:4b:f2:d7:c8:9a:f7:
30:60:ed:ca:36:f0:f7:cd:cb:2e:ca:a9:00:a1:96:bc:4c:df:
69:ce:c6:43:45:90:7e:9d:de:b7:28:be:2c:c8:5e:c7:ef:0b:
13:61:5f:af:e9:7a:0c:97:9b:90:49:7f:5a:24:de:6c:cf:a6:
c9:ab:0d:08:fa:ee:aa:05:f4:4c:c0:73:ed:02:3a:6d:02:aa:
38:c2:7c:dc:71:52:0b:7e:e3:0e:bc:0c:46:87:eb:21:2c:5e:
e3:38:d8:d8:4b:e6:1b:c4:26:3a:12:74:6c:f7:98:88:6a:a0:
d2:ac:20:6f:1a:fd:27:a2:fe:4f:40:1f:84:34:69:ce:08:8e:
f3:e5:45:ba:59:48:eb:6b:7b:75:45:5c:86:d8:68:8d:e1:f1:
a3:d9:86:e9:ec:b6:e0:4d:6c:92:c6:6e:71:22:84:64:02:66:
74:a9:23:75:d0:1f:db:a5:ab:45:d6:fd:d0:84:a1:1d:e7:88:
d3:5d:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:50:18 2025 by rpki-client