Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa
File: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (raw, json)
Hash identifier: Qn6g14AUkLu1btr8Er+hiQxzqayU2xntHB3orOLLw9E=
Subject key identifier: C8:B6:4F:6C:3E:7F:4B:DD:40:49:51:E9:60:D9:6D:CD:AC:8D:F4:5B
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 10BA
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa
Signing time: Sat 30 Nov 2024 05:31:08 +0000
ROA not before: Sat 30 Nov 2024 05:31:08 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 0
IP address blocks: 103.140.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB
Validity
Not Before: Nov 30 05:31:08 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=674aa31c-2cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:71:26:d4:38:4d:03:3a:d0:eb:5a:6a:ed:15:
b1:2a:88:d3:96:11:8a:1a:70:da:79:8e:1d:95:92:
cb:61:2a:0e:5e:df:32:60:70:93:93:d6:b2:7b:fb:
47:56:02:06:03:3d:fd:78:2b:18:a3:a0:97:a0:0d:
62:9c:23:84:00:86:ae:05:bb:5c:e9:a8:78:4c:67:
fd:00:12:d6:f9:10:31:61:68:66:02:7c:68:d6:42:
7b:de:a7:f5:3b:1d:97:eb:8a:fb:b9:6c:3a:96:84:
72:66:37:bf:20:0c:ff:cb:05:b2:50:87:09:c2:d7:
44:63:c2:ba:e1:39:af:0e:a7:47:90:44:28:02:e3:
4a:97:b0:ae:f1:e9:63:e6:b0:f8:06:8f:6f:68:2e:
86:84:a1:58:6f:ca:1c:c7:ee:49:84:bd:4f:44:24:
a6:0e:bf:a1:20:b8:1d:72:9e:fe:f2:6a:65:63:41:
4f:9e:b5:35:d2:da:a5:2d:3d:2e:ff:3d:98:14:80:
9a:c3:46:fb:53:82:3e:76:5d:62:96:dd:c0:fe:47:
0f:99:53:aa:20:96:3c:9d:0b:e3:c9:0d:10:c2:d6:
06:b2:8c:a1:5f:57:bf:64:bf:b9:0b:41:b4:f9:fa:
02:1f:32:b6:f8:a2:a1:cc:06:67:d0:d7:f4:d7:7d:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:4F:6C:3E:7F:4B:DD:40:49:51:E9:60:D9:6D:CD:AC:8D:F4:5B
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/23
Signature Algorithm: sha256WithRSAEncryption
83:e2:52:0d:7b:a3:1a:ee:1e:59:e3:0b:a0:dd:53:12:0d:b3:
fb:73:25:3a:80:eb:52:1a:80:7e:12:b5:62:6e:00:7f:c7:6b:
48:6f:f9:5c:ab:85:8c:05:fe:80:32:55:74:22:5a:17:6a:9c:
49:02:da:4f:ae:ca:ca:89:34:e3:e3:d8:4c:74:fb:63:97:95:
86:76:fc:3e:3a:9a:4f:8a:41:3e:c7:a7:63:a7:fe:6a:9d:d5:
6a:55:e3:a8:be:90:92:63:90:09:45:75:dc:f3:3e:a2:f1:dd:
bb:5a:ea:d3:8e:8a:d3:ef:4d:27:79:3a:05:13:bb:84:d9:56:
9d:98:13:7d:b5:35:2f:1c:9d:03:09:7e:ce:af:85:63:47:c0:
9a:9e:41:06:29:a8:65:45:08:06:6d:d0:cd:7c:b5:e8:d8:ec:
c8:2b:ae:d3:6a:62:47:a6:f0:4d:32:ff:a2:71:be:fe:d3:72:
3d:37:fd:bd:64:88:61:e1:64:35:46:37:21:92:a6:13:9c:ec:
24:b1:b6:3f:7a:0b:13:73:86:d0:1b:52:51:4c:09:70:45:23:
ae:d1:70:ed:27:20:93:f3:1a:f2:66:67:f1:a3:72:97:bc:75:
c9:12:8b:d0:d2:d9:c2:6c:2e:da:a9:eb:3f:0a:bb:16:76:3d:
11:b2:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:34:21 2025 by rpki-client