Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
File: 86BADBF8013511EE81A9F21FC4F9AE02.roa (raw, json)
Hash identifier: 0CFQQuPkMniES7kUDG2th2dFf+/z6LBmnQCmAMjCLSo=
Subject key identifier: 0E:E4:E6:4E:C0:39:60:21:74:9F:48:E2:7F:6C:08:3D:B0:0C:9F:28
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 0369
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
Signing time: Thu 07 Mar 2024 02:24:54 +0000
ROA not before: Thu 07 Mar 2024 02:24:54 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 142127
IP address blocks: 103.162.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Mar 7 02:24:54 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e92576-5dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:f5:32:92:5e:83:1c:7b:c6:39:f6:bf:1d:
33:6e:a9:4a:a1:0a:ee:10:1e:fb:16:d3:a6:fa:6d:
c6:53:d8:43:d0:dc:78:b4:1a:94:6a:58:3b:5f:22:
28:48:91:aa:87:0c:cc:32:83:2e:3a:5b:b8:6f:c4:
c7:b7:15:3d:80:6c:60:a3:4c:04:8c:8f:6f:b2:f0:
b0:75:fd:fb:6c:08:82:03:d1:90:41:8d:03:03:2e:
a7:82:fa:06:f9:54:67:cc:e0:50:16:e9:43:c1:e8:
70:0f:57:89:24:df:20:6a:52:a8:12:60:ae:45:16:
c5:9c:67:72:ce:c6:07:85:ac:ba:b0:4f:82:a2:94:
6d:3e:91:c6:9d:f4:9b:27:ad:89:8c:b2:74:72:ce:
e2:0a:2f:8e:b6:77:9c:83:1d:a8:09:a1:ac:d4:ab:
02:9d:21:5f:04:4d:38:88:d6:80:68:07:66:21:a8:
93:e7:f6:97:7f:dc:fe:50:44:46:47:3b:73:84:29:
da:b9:cd:c1:86:40:d4:81:b9:df:52:4f:5c:08:cc:
36:4f:39:e3:92:59:ec:4c:51:7a:8a:6e:f8:de:d1:
25:85:31:88:40:53:96:98:fa:63:02:e9:a1:52:f2:
1d:f3:ee:fb:30:99:f1:ab:09:30:39:ab:46:6c:e5:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:E6:4E:C0:39:60:21:74:9F:48:E2:7F:6C:08:3D:B0:0C:9F:28
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/86BADBF8013511EE81A9F21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2d:09:04:3f:ce:64:fd:8a:fb:e4:9f:6b:03:af:a4:85:ed:
a4:0b:a7:bb:3c:34:b6:1e:da:59:be:da:0e:37:a5:72:c4:a0:
2d:71:0c:2f:d9:4f:ab:da:4f:aa:04:ca:9a:ca:3b:89:b2:9b:
55:4a:60:e4:4c:60:80:4b:17:fc:19:cc:4b:f7:01:b6:b7:75:
e7:81:d9:36:01:73:a1:4d:ce:28:7c:3c:03:bf:f0:a6:87:23:
89:33:81:32:26:ec:f8:46:6a:8b:10:6b:69:0f:6a:1e:e3:c9:
a0:24:78:c4:4f:3a:65:a0:34:6c:9d:33:ea:30:95:3c:1e:28:
b5:7a:17:da:ad:d9:d4:96:1a:d1:94:f8:92:5a:81:e5:f1:d7:
06:2b:db:fa:b9:15:14:83:f9:59:61:5b:63:f0:51:b6:05:95:
95:c1:10:17:51:58:20:ee:e2:bd:1b:16:62:97:d5:b5:45:7f:
aa:4a:c4:23:97:64:c5:64:3f:57:e0:bc:fe:e8:45:61:e7:14:
ed:67:4f:ce:d2:51:e2:47:ec:30:8d:e2:10:93:b6:83:3e:86:
93:54:9b:2f:92:b4:d1:86:13:7f:96:1e:8a:f5:51:da:73:ee:
62:59:b4:37:1f:cb:c4:db:c2:d4:08:81:df:91:6f:c1:d8:a7:
9d:9d:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:15 2025 by rpki-client