Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
File: B5A6B25A429411EB9D08C02FC4F9AE02.roa (raw, json)
Hash identifier: HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=
Subject key identifier: D1:1A:0E:9F:42:BB:F9:EF:AB:97:2A:C5:3F:59:8C:0B:7A:1D:A5:F2
Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial: 06BD
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
Signing time: Mon 30 Dec 2024 22:01:14 +0000
ROA not before: Mon 30 Dec 2024 22:01:14 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137967
IP address blocks: 103.158.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Validity
Not Before: Dec 30 22:01:14 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6773182a-bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:ef:08:13:94:45:36:8b:76:91:71:59:15:
67:d2:60:96:65:0d:4c:4f:92:9b:d6:3e:70:97:c2:
f6:8b:cb:58:e9:06:c2:76:b9:0f:bf:4c:49:c9:89:
4e:5a:07:35:77:14:4b:15:97:a8:00:0c:97:64:91:
1d:ec:1b:e4:64:90:e1:4b:73:ee:72:d9:a7:89:03:
44:76:ad:86:c3:7b:ce:f7:96:50:cf:a5:ba:5d:19:
81:4a:ff:e6:67:e2:ad:e0:5d:24:80:6d:1d:a0:ef:
97:20:dd:95:35:5b:19:ef:2a:10:57:da:cd:42:b1:
2b:1d:13:b1:2e:6f:8e:7c:1b:0a:5e:cb:0c:7f:01:
2b:c0:4d:fd:c3:c8:74:29:df:83:73:6e:c4:01:10:
f0:a5:38:b5:bf:dc:43:28:49:31:60:6a:0b:5e:33:
97:03:91:3a:81:d8:03:68:c1:14:4d:f9:ca:68:ac:
bb:c3:8b:4e:9a:02:ff:e6:36:c7:cd:6e:23:3a:40:
64:eb:50:73:c9:b7:0c:90:dc:1f:38:a7:38:a6:96:
61:48:15:12:21:28:ff:72:d1:bf:c4:49:63:7e:76:
af:66:0d:f0:0e:f1:4d:6e:3d:d3:bc:a8:ef:62:f9:
2b:64:91:fd:b6:5e:f2:fc:f7:c2:cd:ab:f6:63:1d:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:0E:9F:42:BB:F9:EF:AB:97:2A:C5:3F:59:8C:0B:7A:1D:A5:F2
X509v3 Authority Key Identifier:
keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:00:5e:10:78:07:3d:d5:a6:de:8b:0b:00:68:76:a3:cd:e3:
45:8a:d7:8e:64:5a:b9:eb:8c:33:d0:35:59:d7:ee:be:78:af:
6a:28:d1:c9:c9:3d:ad:c7:16:f1:9a:39:c7:62:9e:2a:67:a2:
da:7e:4c:c3:0a:e3:4c:18:59:5f:0b:1a:ba:25:b0:72:11:94:
b2:ba:a6:0d:ac:70:aa:dd:89:0a:60:94:87:52:37:94:4d:b8:
2c:58:05:67:2d:0f:8f:c5:12:6e:f4:05:0a:21:30:fe:02:82:
ed:8d:26:01:c3:31:3e:47:f8:55:38:b3:dd:31:8b:6e:6d:8a:
ac:e8:a7:b4:03:33:90:65:4b:58:cb:06:32:df:e6:b3:33:c9:
d4:50:bd:f6:72:6f:76:7f:2e:89:2c:4e:a1:53:21:c9:56:79:
54:93:ee:3d:9e:c0:d4:36:bf:a6:79:37:a3:80:9b:26:31:50:
20:24:d6:58:17:67:e3:16:b0:67:95:b3:1c:09:50:3a:59:c4:
e3:4f:be:8c:35:3a:5d:4c:57:d4:53:e0:35:7b:60:ac:4b:64:
f3:7d:19:7d:18:c9:54:6c:42:18:9d:a5:24:bd:0c:d5:4d:e6:
bf:93:e5:c1:de:5b:e7:06:67:6a:3d:36:b8:07:af:3b:c4:cc:
79:2a:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:35 2025 by rpki-client