Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
File: 8144C55412E611E98A4A6A35C4F9AE02.roa (raw, json)
Hash identifier: okbTN55SyqtP67LmOeEN1mMfyDWJ/TuQV3Kqc4AlxzI=
Subject key identifier: AB:A9:63:A2:BE:32:7A:05:FA:01:00:8A:49:DB:0A:DA:4D:4E:BD:F7
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1DC5
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
Signing time: Thu 02 Jan 2025 16:13:25 +0000
ROA not before: Thu 02 Jan 2025 16:13:25 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133749
IP address blocks: 103.76.40.0/22 maxlen: 22
2407:6180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7621 (0x1dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Jan 2 16:13:25 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6776bb25-35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:19:41:20:55:75:e5:92:f3:dc:32:28:5a:
1f:1e:7f:4c:31:15:d1:03:41:35:02:4c:0c:b9:fb:
57:ab:42:96:55:94:6f:34:aa:28:90:9f:1f:02:50:
5a:8e:4a:24:42:87:f2:56:c6:d3:bf:0c:e1:dd:cf:
f7:e5:27:e3:f8:10:99:b5:71:fa:8d:c3:02:8d:2d:
65:b0:7e:41:b0:95:18:54:59:34:14:59:b3:4e:31:
7b:96:1e:27:a3:92:1d:95:28:ba:ca:5f:42:bb:34:
b7:10:9e:cf:ec:50:5f:93:cd:6e:ce:c6:cd:b1:38:
60:4f:6e:ed:db:81:a6:82:97:ee:9c:61:09:a6:02:
58:cd:da:9f:74:88:21:d7:0e:1f:3c:f6:8b:ef:03:
96:c9:8a:5b:8f:61:20:15:39:54:25:ec:ca:7b:58:
06:e6:42:4c:62:c5:46:fa:a0:47:44:dd:d8:07:a0:
c9:89:23:21:45:e7:86:55:b5:4b:41:8f:96:2c:77:
e4:09:ab:c2:52:d8:50:d0:39:31:7d:9c:fd:0a:f3:
36:06:09:57:e7:70:9c:ed:91:90:91:47:46:75:5c:
19:6c:e5:bb:88:72:11:61:e6:60:d5:13:a4:f7:a5:
9c:84:b5:7c:18:15:0e:c3:df:95:9a:f9:ae:51:e0:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:63:A2:BE:32:7A:05:FA:01:00:8A:49:DB:0A:DA:4D:4E:BD:F7
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.40.0/22
IPv6:
2407:6180::/32
Signature Algorithm: sha256WithRSAEncryption
a7:41:43:d1:6e:0f:95:da:d4:13:d9:64:49:54:3f:2b:d8:14:
73:60:47:84:38:e8:46:86:74:7a:53:65:70:3f:c0:e3:04:b8:
d5:14:67:6f:d3:94:a1:a2:19:4b:b4:54:40:c4:e7:8f:06:35:
ad:02:c1:b3:3f:9a:49:21:8c:11:03:1f:dd:0c:1e:17:d3:87:
fa:3e:8d:f6:a4:1d:89:ce:ac:5a:92:55:75:a2:cf:df:7b:91:
9d:4e:5d:00:16:b1:0a:0a:a4:f5:aa:90:69:a1:95:2f:62:37:
05:d7:f5:53:a8:0f:9d:4b:6c:32:e2:2e:64:81:30:70:64:d3:
e5:97:4f:7b:7f:18:2b:42:ef:ad:1c:50:77:d9:21:8e:da:df:
8a:56:4b:d3:25:3c:47:09:a2:2d:f6:33:53:ec:36:70:24:26:
a2:71:cd:93:64:78:a7:e9:47:ae:ac:74:39:83:e0:69:fb:dc:
20:25:9e:e6:17:85:a9:33:a2:bd:19:64:18:f0:7b:f1:19:18:
70:8b:11:99:f9:bc:8f:36:32:c5:34:dc:4f:be:c9:b8:87:5b:
42:8f:be:97:69:00:ba:ed:e4:5d:03:d3:8d:f8:4b:ce:de:7f:
70:f2:28:09:6c:df:16:f8:13:8a:e1:c3:ff:55:5c:00:21:74:
7e:4c:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:03 2025 by rpki-client