Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
File: 87BCB892503311EB85660C6AC4F9AE02.roa (raw, json)
Hash identifier: P5dG17Uydwd8oz4u6zjOdUgyacq9Ugyj09D5EEaQMaQ=
Subject key identifier: C4:8D:AA:52:61:68:6F:F6:AC:76:99:BB:D9:F9:3A:EE:8F:71:78:88
Certificate issuer: /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial: 06DB
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
Signing time: Sat 28 Dec 2024 21:30:40 +0000
ROA not before: Sat 28 Dec 2024 21:30:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141443
IP address blocks: 103.159.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Validity
Not Before: Dec 28 21:30:40 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67706e00-d56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:9f:66:bd:41:ab:f1:03:1f:d2:ca:99:1c:
06:f5:8f:07:3a:1f:3c:3e:5d:c8:fa:8e:be:b6:3e:
50:b7:5d:fe:59:ae:a5:4d:06:13:5e:dc:5b:60:4f:
4d:eb:d8:06:3c:f7:0a:de:1c:81:76:d8:8b:09:68:
6a:72:c7:ed:d0:45:c7:fb:32:6e:0c:7c:6c:39:9b:
84:fd:67:e4:5a:b6:1b:6d:3a:11:fd:69:a9:ef:2e:
22:ea:fb:9b:a2:ef:46:f0:b2:f2:1c:ae:4a:ad:c3:
88:8d:2c:92:5d:a4:9a:36:51:5e:06:85:1f:eb:19:
3c:5c:e0:89:42:e7:a8:6f:fc:e7:44:36:da:96:b0:
f8:4c:a3:e5:4e:4f:44:74:da:48:f8:b8:17:a1:48:
2b:da:3b:e0:c2:ba:a2:25:92:94:19:cf:6b:8d:48:
b4:05:82:a6:f0:88:64:ec:ae:16:eb:31:26:60:1c:
59:74:cc:7f:13:87:21:7a:2b:57:74:da:b2:93:5f:
7d:d0:ad:81:de:f9:49:c5:23:8e:46:da:22:d0:ea:
59:09:6f:e9:5c:eb:83:74:3c:6c:04:5c:73:af:2a:
54:3e:03:dc:5f:e3:f4:98:13:44:98:41:09:6b:e1:
d9:71:10:f0:c4:f1:34:e5:77:2f:c4:27:fb:fe:53:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:AA:52:61:68:6F:F6:AC:76:99:BB:D9:F9:3A:EE:8F:71:78:88
X509v3 Authority Key Identifier:
keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/87BCB892503311EB85660C6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.130.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:66:63:4a:a0:13:51:7a:f3:0c:70:d5:a2:99:9d:8d:d3:73:
17:78:6d:9f:03:54:3d:2e:dd:b8:c0:4f:a1:f2:73:65:48:da:
e3:3c:07:42:ed:1e:0a:99:27:bf:d2:01:02:20:dc:57:f4:d9:
9a:d8:d7:11:ce:82:85:06:8c:a2:b5:89:b0:29:44:b8:57:b2:
3e:ad:55:2a:89:25:67:43:7e:98:a6:dd:35:ec:c8:b7:f0:04:
bc:ae:d3:ba:82:f6:52:9b:ae:9f:41:b5:f6:f0:1a:a1:32:6c:
cf:a7:80:a1:dc:1e:92:32:d0:76:ac:5c:ff:bf:61:6e:20:9f:
59:a7:34:f5:8c:bc:e7:ad:79:59:91:69:ad:20:9b:89:03:c6:
ce:43:04:c2:6e:a0:ce:18:ae:4b:79:69:f7:87:a8:be:56:b1:
41:ea:e9:84:5a:e1:ea:d0:ef:fb:38:48:e2:5d:91:f8:55:c8:
a9:c0:06:08:24:d4:d2:64:c5:ce:48:cf:0e:fd:2f:84:a3:b5:
8a:44:75:b9:fd:91:ae:e2:c3:bf:0b:61:62:42:98:d8:09:95:
b4:9a:8a:b9:46:9c:9e:e5:b1:ce:ad:b2:e9:eb:b6:be:f0:ff:
e6:99:0f:03:ed:d9:df:52:1f:54:6c:98:c7:1c:10:0f:b9:84:
e4:51:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:56:46 2025 by rpki-client