Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
File: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (raw, json)
Hash identifier: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng=
Subject key identifier: B8:BF:57:95:69:ED:F9:5D:E6:AB:EB:75:49:7D:39:75:48:34:A6:8E
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: CD
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
Signing time: Thu 07 Nov 2024 03:57:27 +0000
ROA not before: Thu 07 Nov 2024 03:57:27 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 141210
IP address blocks: 103.173.188.0/24 maxlen: 24
103.173.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69
Validity
Not Before: Nov 7 03:57:27 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672c3aa6-ce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:97:f3:57:86:ac:b6:bb:41:f8:67:a1:b1:
fd:ae:16:22:00:e2:a0:71:23:8c:dd:a6:fa:46:bd:
92:2f:4f:26:33:09:12:86:93:41:00:70:61:19:ce:
f7:e3:e2:1d:6a:ea:ac:78:68:0a:4a:b1:7b:65:6a:
08:f6:f2:de:16:b7:d9:dc:65:7a:18:63:c9:87:c1:
3b:96:25:26:51:6c:7a:22:73:dc:21:35:7a:24:9e:
8e:da:18:a8:58:2f:68:e0:2f:1d:42:58:51:25:46:
66:3e:0a:fe:7b:f0:d2:4f:22:ae:11:b8:83:75:eb:
bc:82:ae:9d:f1:9e:47:39:1d:94:64:7e:bf:b0:fb:
e7:86:e4:7b:04:81:31:76:aa:23:f4:1d:1d:76:0b:
07:f0:0c:e9:a1:09:be:ac:11:5f:8d:1f:be:e4:f5:
11:f4:1c:87:8c:db:3f:9e:b5:a0:a8:45:fd:0d:fe:
4c:86:5f:8c:7b:9f:5f:60:48:d9:af:07:69:d3:df:
8b:2b:58:be:a5:a0:0d:a0:b8:18:94:3b:fd:63:11:
a7:63:13:24:e8:51:b9:69:a9:b5:d7:b4:fa:a3:f8:
d7:c2:ab:7e:5d:0e:71:bc:26:9a:01:b1:60:b8:13:
4c:9a:4b:d8:5b:0a:8e:78:1f:fe:cd:8d:9f:23:37:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:57:95:69:ED:F9:5D:E6:AB:EB:75:49:7D:39:75:48:34:A6:8E
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ba:b3:25:cb:2e:5b:81:2d:a5:b9:69:18:b9:84:58:e6:e0:
51:2b:43:96:28:c9:15:82:87:ba:39:e4:47:3a:f9:3e:e7:25:
4e:be:1d:3a:b7:5b:1e:a5:88:3e:66:aa:70:1d:dd:ab:79:02:
ae:a9:0d:d8:e5:a5:89:ae:e5:1c:21:cc:8b:71:c7:cf:2a:27:
da:f1:fb:bf:a6:c8:6a:e6:f4:4a:b5:0b:f8:07:f5:ae:02:a2:
cd:43:4f:84:93:6f:e3:a9:d8:ea:a9:79:de:b6:93:2b:64:2c:
52:94:1d:bd:ac:1f:ce:1a:8a:2b:13:40:24:86:18:70:8b:5a:
87:3b:7f:b0:24:ff:dc:d9:51:af:83:95:00:24:4a:aa:0a:e8:
79:fd:48:68:31:52:07:01:60:cf:87:79:69:f9:89:f1:0c:44:
59:08:b9:87:67:41:1a:dd:18:5c:a5:a3:ec:b7:78:9b:9a:f0:
bb:c1:b6:07:dc:54:af:74:d9:e1:22:90:39:70:74:ee:04:db:
f0:15:13:fd:5b:b6:31:31:31:0a:87:0d:c7:28:24:04:d8:de:
8e:7b:f0:fe:18:1c:e9:12:30:7a:d3:f5:0e:d4:b7:40:56:7f:
63:95:85:d6:76:6a:14:62:45:42:f6:5d:cb:8b:82:54:f8:8c:
2b:6a:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:48 2025 by rpki-client