Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
File: 065143FAB71C11EF9C368D66C4F9AE02.roa (raw, json)
Hash identifier: +hrQ9Yj+lqvxfGOvfKuirvSWj50hDHN4Y7/dMeMO6sA=
Subject key identifier: 43:B7:22:15:A3:BF:B5:48:B6:7A:9A:1F:67:27:7F:EA:A8:E6:93:E3
Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial: E3
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
Signing time: Tue 10 Dec 2024 17:27:27 +0000
ROA not before: Tue 10 Dec 2024 17:27:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137899
IP address blocks: 103.149.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Validity
Not Before: Dec 10 17:27:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675879ff-1dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:65:ae:a2:f1:27:0d:a2:be:df:78:8a:8a:
a9:fd:bb:08:96:1d:1d:2c:3f:2f:a5:2e:cf:ea:f0:
ff:f2:4b:33:1c:c3:ff:7d:41:d9:3a:29:b9:b9:09:
c5:5e:84:79:fb:0d:c3:f7:6e:b6:11:ed:8b:c7:7c:
06:8b:ea:ca:42:3e:8f:df:8e:73:d4:2f:5a:c5:76:
78:fd:b6:7e:6e:dd:9b:4a:f7:ab:43:dc:18:61:da:
62:17:b0:cf:89:25:e2:17:da:76:c0:09:d7:44:d4:
47:05:d2:dd:51:0d:16:b7:55:ba:68:ff:0c:0c:19:
7c:d6:93:b6:62:46:06:ab:5c:36:5a:97:49:65:53:
73:43:47:63:28:37:c1:6f:f7:cc:f7:77:9c:d4:a8:
59:44:d4:07:3b:79:04:50:f1:d7:af:79:3d:40:31:
d7:de:dd:3c:e3:30:a3:d0:dd:43:c9:9e:53:6d:4a:
3c:9e:d8:98:cd:3f:d5:f2:5e:6b:2b:92:78:31:8b:
3d:c1:f1:65:1a:d4:23:a9:db:68:43:aa:1f:df:07:
7c:a9:8d:75:b9:5a:19:56:69:8a:e4:97:be:5c:17:
e8:bb:59:9b:d7:5d:25:69:35:a2:81:82:a4:74:c9:
98:ab:e2:ba:27:c2:82:68:30:8f:25:d1:07:59:01:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:22:15:A3:BF:B5:48:B6:7A:9A:1F:67:27:7F:EA:A8:E6:93:E3
X509v3 Authority Key Identifier:
keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.200.0/23
Signature Algorithm: sha256WithRSAEncryption
49:99:3c:4f:68:2f:ea:f8:7d:8f:df:86:7d:19:08:4d:a7:3c:
20:c3:a2:82:aa:61:7f:aa:fd:03:ab:dd:e2:38:03:59:6b:b1:
27:07:d5:74:6b:3c:1b:77:89:b9:b6:8e:6d:a9:3b:0b:f2:99:
1a:37:db:3e:53:09:17:05:fa:71:91:d5:45:f9:c2:8e:29:1d:
7f:e7:0b:bd:39:7f:0d:57:0a:5c:c6:19:23:97:81:51:c5:13:
db:50:c8:b2:56:b9:88:79:54:aa:ce:c0:04:a2:75:6e:bc:7b:
89:2d:f0:f8:d5:89:24:4d:2e:85:94:77:c3:0d:5e:0b:7d:77:
8d:ad:c7:db:aa:c7:78:2f:ae:ad:b6:5c:21:07:db:08:33:48:
f1:a2:e7:fe:fe:83:66:f0:28:d0:e7:ab:7e:e2:e5:59:3c:37:
ff:9a:8c:f6:33:f9:fc:82:e3:1d:3a:06:38:c0:7b:6b:69:fe:
02:d5:8e:39:16:37:07:7f:81:d6:bc:54:dd:c1:35:22:2f:8f:
67:c2:08:33:da:ef:fc:9e:30:7f:ed:4a:3d:85:bb:3f:83:1c:
28:04:0b:bc:cb:6f:99:06:f4:81:ee:a5:12:90:58:bd:bc:20:
af:f3:50:8d:13:08:d4:64:c7:cf:16:7e:7f:b8:ac:95:13:a6:
57:76:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:34 2025 by rpki-client