Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa
File: AD1B7E40A5C511E8A9B85134C4F9AE02.roa (raw, json)
Hash identifier: G/+aMcdn4Jk49lhNesVyUlNP1/Jmx6JWIxijg1iwB7I=
Subject key identifier: E8:FC:74:7B:B7:EA:A6:38:C7:27:3D:F3:AE:BA:78:D5:30:82:42:CD
Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487
Certificate serial: 12BA
Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa
Signing time: Thu 22 Aug 2024 17:35:12 +0000
ROA not before: Thu 22 Aug 2024 17:35:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133977
IP address blocks: 103.116.176.0/24 maxlen: 24
103.116.177.0/24 maxlen: 24
103.116.178.0/24 maxlen: 24
103.116.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4794 (0x12ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F89D, serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487
Validity
Not Before: Aug 22 17:35:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c776cf-2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:9a:69:08:a7:27:18:4a:d6:a7:ca:79:b4:
6f:bd:21:b3:e5:b0:1e:21:ad:54:df:59:17:0d:86:
b6:83:68:71:dc:cf:19:91:eb:b0:ef:d0:9c:47:5d:
2a:b1:96:96:8b:0b:f0:cf:06:02:21:b4:e1:f8:d5:
73:14:bc:06:7c:eb:50:0d:cc:89:d7:a7:76:88:a8:
29:ae:83:d4:d7:8f:a9:96:0c:5a:53:cf:3a:c3:fc:
7c:dc:65:02:86:78:6e:18:c8:de:70:e0:91:4b:7d:
66:55:f6:f0:06:7c:6e:8b:87:bd:5e:16:4c:69:06:
e7:31:51:4b:89:4f:d4:9b:32:04:a5:d2:33:73:8a:
b6:18:d3:34:25:8d:cf:64:1b:e1:d6:e2:56:96:38:
0f:c5:4c:59:ba:80:85:8c:31:0f:d2:ca:1e:15:8e:
d2:ca:89:87:73:69:4a:2d:73:18:67:9a:c3:36:e8:
80:1d:e3:84:45:93:ad:f6:6a:e0:a8:1c:0b:cc:65:
6f:35:88:7f:54:30:36:bd:16:20:9c:c8:68:35:5a:
0b:44:49:3d:14:0c:05:96:e4:b8:25:7d:6b:73:aa:
36:3e:4e:f4:51:f5:32:9f:a5:41:d0:82:95:f5:39:
62:b6:c5:84:01:ef:53:d1:e5:fb:7a:f5:ac:ff:dd:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:74:7B:B7:EA:A6:38:C7:27:3D:F3:AE:BA:78:D5:30:82:42:CD
X509v3 Authority Key Identifier:
keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/AD1B7E40A5C511E8A9B85134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.176.0/22
Signature Algorithm: sha256WithRSAEncryption
61:62:1b:eb:dc:7d:fb:1d:88:9b:8a:88:e3:40:ed:f7:c4:8f:
37:f5:b3:46:16:33:b5:d7:79:f1:f9:2d:32:20:40:b8:f7:cb:
56:69:8d:45:d2:4c:bb:47:fe:42:a0:05:fb:ef:df:0c:9b:06:
96:8b:28:00:43:c8:66:75:1b:ea:42:cc:e5:55:39:4b:42:87:
16:e9:0f:8b:b9:9e:df:e2:a7:5c:72:c8:30:8a:d4:25:12:97:
ef:13:f1:10:ac:ec:bf:07:04:dd:09:94:36:66:66:2e:9a:25:
ca:17:54:f7:da:dc:80:34:a8:da:21:fc:9f:68:0f:9a:97:1d:
11:4b:95:7b:2b:f7:f3:a9:e7:64:4f:95:c6:85:33:cc:69:d4:
9d:95:61:80:69:f9:9a:f0:87:3b:92:41:29:31:1e:93:5d:37:
40:95:fd:de:ca:ae:a5:0f:5a:03:a6:91:91:4a:6a:0f:33:9b:
a6:bc:3e:17:04:64:44:3c:9c:03:d6:92:ce:e3:25:fe:f5:9c:
39:5f:a2:d1:c2:b1:5f:66:74:03:17:f7:33:da:ba:0d:ec:ea:
51:21:c8:e5:b7:42:54:c3:03:d8:5e:e3:aa:e7:41:19:2b:8f:
23:65:e3:23:f8:50:60:ed:76:d4:02:54:7a:d9:a2:b7:f6:e5:
fa:a6:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:38 2025 by rpki-client