Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
File: 410F8C0EDBC611EEA717194DC4F9AE02.roa (raw, json)
Hash identifier: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=
Subject key identifier: 60:76:47:49:5A:B7:E9:CD:D8:5B:5C:CE:43:11:6E:2F:CB:F7:57:70
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 05B3
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
Signing time: Wed 08 Jan 2025 22:52:10 +0000
ROA not before: Wed 08 Jan 2025 22:52:10 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140607
IP address blocks: 103.145.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A
Validity
Not Before: Jan 8 22:52:10 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f019a-6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:62:2d:95:a7:b0:7c:71:55:ab:8c:fa:5e:
f3:6c:d1:83:70:cb:46:46:51:22:d6:43:24:b2:61:
d6:91:b2:3b:b2:a3:6c:63:ba:9e:da:4f:f2:bb:22:
0d:6f:fb:31:fe:1d:42:7d:3d:ab:f1:8f:e2:97:f4:
a7:8b:3f:4e:f0:70:fc:63:e8:53:27:08:28:00:29:
1c:2d:d1:2e:52:b3:a0:47:51:af:12:f9:0f:54:2e:
42:f5:31:c5:d8:db:fd:b7:d4:60:44:8f:e2:19:33:
45:25:25:8d:44:21:b9:40:aa:71:ef:ac:7d:66:3f:
d1:84:4c:76:a4:0c:df:39:19:f7:12:64:29:30:bf:
f1:20:be:6b:e0:02:cf:78:88:74:03:b7:36:a1:1d:
21:72:4d:f2:01:51:e8:a2:d2:8c:97:98:ea:45:8f:
40:3d:67:8f:3b:74:80:42:a6:83:a6:6f:c7:7c:44:
c2:ce:0a:17:87:43:be:72:33:1f:84:ef:05:cb:3b:
ea:8f:7e:61:bc:6e:1f:d6:50:ed:e3:01:78:bd:8b:
14:09:fb:97:fa:3f:fe:4f:cd:a0:24:5d:1f:37:8f:
a6:07:0d:38:44:07:6b:24:f6:8a:05:36:f9:bd:59:
dd:c5:50:91:28:fe:2e:34:72:6f:70:9c:fb:2f:ff:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:47:49:5A:B7:E9:CD:D8:5B:5C:CE:43:11:6E:2F:CB:F7:57:70
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.185.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:93:8e:b3:93:2f:a7:b9:90:40:10:be:23:8b:2f:c0:ce:58:
6a:b0:ee:70:cb:59:51:ba:30:7a:eb:19:6d:65:09:dd:25:5d:
a6:15:c8:96:f4:bf:4f:17:f7:d1:ea:94:5a:b6:78:e2:06:1e:
02:fa:a6:2c:72:0c:91:e2:d2:65:d0:cf:9f:3b:bd:97:78:8b:
4d:db:73:f4:91:18:0e:ec:11:c3:ed:72:45:b0:05:71:c5:ba:
b4:4e:b1:34:e0:80:3f:13:83:4f:95:6f:16:86:33:8c:56:78:
81:be:01:b4:ee:f2:f6:1d:ef:9f:4d:5d:7b:30:f4:07:80:16:
5b:2d:10:f6:77:51:04:47:d0:2e:91:fb:1f:fc:26:eb:4c:23:
ee:ae:97:31:49:5a:99:b1:ea:46:5e:0b:d8:e0:9b:1c:af:4a:
4c:ec:a0:56:39:3f:82:63:77:7e:46:e7:9a:26:ed:92:50:52:
39:12:32:0c:19:ac:72:32:a6:24:3a:c3:d8:43:dc:09:71:47:
21:d3:8c:36:06:62:ef:2d:26:65:7e:dd:96:92:32:ec:d2:8d:
09:d5:75:27:23:6e:88:2a:c7:3d:44:12:5b:e1:84:6f:d6:31:
a5:fa:fc:b8:18:3e:e7:16:4f:b1:d6:7a:c9:cf:d7:81:ba:78:
30:e9:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:22:38 2025 by rpki-client