Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/1A730DE47E7111EE86D26C56C4F9AE02.roa
File: 1A730DE47E7111EE86D26C56C4F9AE02.roa (raw, json)
Hash identifier: XSpHcEOpTrOvKZoiLadtZQdxZNwBG6YLbQDr/2msO2Y=
Subject key identifier: 69:32:46:15:38:BA:85:89:87:E3:DE:65:9C:D5:84:4E:B1:81:1C:26
Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Certificate serial: 0C
Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/1A730DE47E7111EE86D26C56C4F9AE02.roa
Signing time: Wed 08 Nov 2023 19:57:54 +0000
ROA not before: Wed 08 Nov 2023 19:57:54 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 139008
IP address blocks: 103.218.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB17, serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Validity
Not Before: Nov 8 19:57:54 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654be841-b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:4b:6a:e8:cc:ed:0f:ba:cf:dd:d0:df:9e:
15:96:32:40:0b:88:30:1d:da:a2:a8:aa:14:20:f1:
b1:f5:f8:17:5b:ab:34:d2:f1:b5:9e:87:2f:c5:8a:
27:d4:ab:a1:ad:75:ed:5d:20:54:59:8b:1e:97:2a:
1e:f9:3e:d3:50:d3:73:63:d6:21:95:aa:e7:13:5c:
e2:18:d0:dd:2d:af:95:8b:d0:67:ff:5c:ea:98:15:
2a:cc:b4:f5:37:1c:97:bf:40:5e:d3:c9:41:a5:5c:
10:b6:82:4c:20:02:bb:ef:f2:1f:92:74:19:03:b9:
35:d6:6c:d7:77:8d:f8:b0:31:e2:e5:7c:aa:fa:f7:
65:ab:2d:be:d3:8e:5e:c7:4e:c6:34:e6:81:1b:37:
0a:21:51:1f:ff:9d:ae:21:35:9a:54:39:74:46:1f:
9f:24:71:89:dc:aa:49:38:cb:3c:ff:a7:ec:f8:b8:
17:9b:31:f8:9f:69:8d:ee:57:9e:08:a3:b0:f1:c7:
ea:ff:77:5c:cb:7b:c1:6e:c8:65:fb:18:70:a3:3b:
72:3b:d9:ac:f0:34:4b:44:9a:18:e2:fc:17:e2:35:
c2:28:3a:ee:b5:ce:dd:0b:cf:28:74:e2:e6:80:ba:
48:01:3b:f4:b8:08:95:d4:9c:75:3e:22:22:43:39:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:46:15:38:BA:85:89:87:E3:DE:65:9C:D5:84:4E:B1:81:1C:26
X509v3 Authority Key Identifier:
keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/1A730DE47E7111EE86D26C56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:28:c6:e9:77:20:05:33:78:1d:38:5a:20:35:bb:27:4a:7f:
1e:8f:d7:bf:69:6a:52:65:48:41:e4:10:b0:cf:02:d9:bc:0e:
3f:01:a6:88:ce:7c:72:b7:e9:92:fa:cb:aa:bf:0c:7e:5d:20:
6b:94:db:13:2a:a2:25:7c:e0:aa:fd:3e:b9:b1:3e:11:b7:fa:
d5:27:42:63:7e:ad:2d:d6:fa:01:03:91:e3:98:5c:5f:61:16:
45:43:4a:87:32:4d:86:32:f9:de:9e:9d:9a:da:74:0e:d4:90:
38:bf:2a:82:07:de:d6:81:53:05:2d:a2:e5:f9:5b:28:6e:5e:
57:98:c7:29:c9:60:6d:d0:68:35:2a:1f:b4:29:ae:b6:3a:9d:
b0:31:fc:26:96:f0:dc:f1:72:a3:2d:91:b9:98:7e:4b:69:0e:
71:8d:5a:58:63:27:11:cc:13:c0:a2:57:a2:82:8d:79:56:d2:
58:07:1c:65:71:55:42:15:2e:f2:d1:a0:18:59:09:9d:94:dd:
e5:c7:eb:35:b5:45:13:d4:3d:b6:ac:8d:07:2a:7d:35:93:ae:
7f:d4:a9:79:56:8b:45:47:de:23:42:46:1f:9a:3a:bd:c9:82:
f4:70:06:a1:19:c7:eb:ed:70:54:ca:33:bc:13:ce:49:47:c1:
27:cb:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:50:35 2025 by rpki-client