Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa
File: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (raw, json)
Hash identifier: sbkQxmyHF5zPQR/UDBWCWEbbyoVFQKNcg9AzuA7dWNo=
Subject key identifier: D8:C6:64:7E:DF:4C:7B:BF:C8:20:B7:78:29:08:11:7E:B5:E6:E0:9A
Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial: 0466
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa
Signing time: Sat 03 Feb 2024 01:14:02 +0000
ROA not before: Sat 03 Feb 2024 01:14:02 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137455
IP address blocks: 103.161.24.0/24 maxlen: 32
2001:df5:b480::/56 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Validity
Not Before: Feb 3 01:14:02 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bd9359-7cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:85:57:4b:d0:a1:31:d9:42:b9:81:a5:c8:
9f:8f:d1:cd:1d:c0:0b:05:c0:c1:0b:e8:e9:e8:df:
8f:bc:eb:93:90:6b:d4:00:59:f7:c1:39:71:5b:7b:
11:c9:4d:11:dd:a9:3d:43:9d:9b:95:c6:05:f0:20:
d1:5e:96:e4:01:24:bf:94:8a:9f:fc:2d:6f:f5:a0:
fa:3f:c2:ad:1a:59:fd:79:4f:37:7c:74:b6:eb:de:
52:2d:45:d1:ba:26:0a:f9:21:07:9b:c8:2d:e9:3c:
74:6b:c2:4e:80:7f:e5:1a:9a:e7:5e:2c:4a:de:f4:
1e:04:26:d3:50:55:f3:a9:1f:56:d5:b5:2a:c4:7a:
b2:95:fb:b6:93:b2:84:d9:31:1f:21:0a:2d:8d:4f:
ba:fe:ef:8b:9b:fd:f7:85:06:99:77:bc:b9:b0:90:
5b:fa:d8:ee:76:3e:cc:91:1e:c7:48:1b:61:f0:22:
7c:0e:38:67:4a:de:dc:fa:cf:d3:20:fc:04:42:fb:
6c:5b:8a:a7:c1:73:ff:a2:9b:f1:67:66:a1:66:b6:
45:cf:6d:a1:58:93:3a:54:cb:04:81:67:b0:30:1d:
35:60:3b:b9:f5:47:5b:bd:b6:f9:46:8b:9a:d1:df:
67:73:4d:34:5a:05:73:b3:25:c1:c3:a7:39:de:d5:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:64:7E:DF:4C:7B:BF:C8:20:B7:78:29:08:11:7E:B5:E6:E0:9A
X509v3 Authority Key Identifier:
keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/F2DDD4EEFB3211EB967B1759C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.24.0/24
IPv6:
2001:df5:b480::/56
Signature Algorithm: sha256WithRSAEncryption
ac:d0:73:37:ca:86:17:1d:87:8f:03:93:2e:57:6b:95:9b:f5:
c4:eb:c4:83:6a:d3:9e:32:53:0e:d1:93:46:7b:7c:b4:c3:b4:
3b:79:04:fa:31:6d:30:c5:df:bb:ea:dc:f9:90:1f:78:ef:92:
52:4c:dc:64:59:43:23:79:fb:cf:cf:1f:94:a4:de:44:50:57:
d2:f5:87:6a:82:b2:b0:fa:d4:be:9b:55:e7:cf:12:3f:ad:1f:
51:84:d0:3e:5f:b2:5c:8f:d9:12:8c:8d:94:4f:cf:f6:96:6f:
5e:85:1a:f2:89:68:3f:85:4e:4e:2c:f7:10:13:a3:51:b3:26:
96:7a:9b:99:fb:31:6f:46:e8:b3:8e:72:71:e2:11:46:b8:49:
8c:42:10:5d:e9:8d:a7:19:89:69:53:4b:cf:31:97:89:73:d2:
40:d1:1d:38:6f:e2:13:cd:5f:61:6a:0f:37:1f:f4:ab:8d:1d:
8a:35:16:a7:17:ce:c3:54:38:01:9b:a7:99:4d:50:67:6a:d4:
da:03:ca:9b:59:57:3e:20:2c:35:7c:47:ba:ab:05:cf:e9:f4:
ca:64:cb:09:ec:48:0c:59:3c:54:41:e2:27:a4:df:b2:25:ec:
67:2a:99:e1:c8:8b:0f:ee:69:10:60:6d:87:f6:10:39:70:df:
d2:60:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:15:49 2025 by rpki-client