Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
File: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (raw, json)
Hash identifier: PHX6rBB1gYL020QSQQUa5cF0QDgu1xf32btZ+B5lqT8=
Subject key identifier: 4C:DA:24:88:D7:DF:1E:D3:F7:0D:63:22:C9:53:C9:8E:3E:48:F3:FD
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 17DA
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
Signing time: Mon 04 Nov 2024 15:53:09 +0000
ROA not before: Mon 04 Nov 2024 15:53:09 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 59254
IP address blocks: 103.224.12.0/24 maxlen: 24
103.224.13.0/24 maxlen: 24
103.224.14.0/24 maxlen: 24
103.224.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6106 (0x17da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Nov 4 15:53:09 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6728ede4-8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:4c:cd:9f:eb:2e:ef:b4:8a:60:86:6b:b6:
05:02:bd:6a:55:73:96:2a:6f:ad:f8:7f:03:77:b5:
79:64:d6:62:96:e3:cb:1e:9f:80:c8:48:2e:fb:5f:
fc:6a:3c:24:84:25:d9:79:a6:1b:2b:fc:03:e3:f1:
f3:20:13:e5:23:e0:8f:08:47:07:67:15:4f:26:8c:
b5:67:6f:aa:83:4c:e3:71:35:14:a2:08:14:4f:ef:
0b:84:aa:77:2a:04:91:13:22:9e:f2:fb:8f:e1:94:
11:cb:81:02:c1:55:73:2f:1d:56:fd:d7:81:bf:5e:
92:e4:f3:c3:8a:1c:cf:67:4f:a7:7e:9d:24:25:9b:
7e:67:46:37:6a:43:89:bb:95:58:81:4e:2f:45:ce:
b5:48:11:11:20:be:b7:b5:53:28:16:5e:77:be:20:
b0:c0:f9:3e:1d:01:35:d1:23:f6:71:36:1c:1b:91:
1f:80:26:da:e9:6b:7c:0c:7d:50:e5:94:ef:3d:2e:
72:22:a6:a1:0c:5e:2a:ae:0f:ba:02:15:fe:9f:9d:
8c:b3:99:89:af:3b:28:03:34:1a:08:be:bb:5b:de:
78:74:24:a7:65:4a:fc:46:4d:8d:d7:41:13:9c:74:
f2:b9:0c:9c:8a:49:78:ec:c5:87:a0:a3:3f:45:c8:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:24:88:D7:DF:1E:D3:F7:0D:63:22:C9:53:C9:8E:3E:48:F3:FD
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.12.0/22
Signature Algorithm: sha256WithRSAEncryption
59:7d:29:97:7c:fa:64:df:af:03:09:7c:01:be:2f:73:19:67:
ec:ed:c8:c3:5a:c3:62:e7:a7:ea:7d:30:00:cf:ea:e0:6b:6b:
e3:cb:98:9d:4e:14:30:5c:ca:2a:d6:5d:53:f4:65:aa:4b:42:
32:4f:52:6f:9e:02:07:90:75:c6:48:46:d0:cd:5d:4f:cd:08:
a7:12:28:25:df:b9:c4:ef:64:9c:a7:97:59:bf:5c:49:af:f5:
09:e1:1c:8e:43:71:75:c3:c2:ec:2f:31:21:f7:ac:83:ed:2a:
6f:f8:f9:88:1a:d0:6e:f4:bb:44:34:34:24:52:37:aa:1c:f5:
b0:a6:5c:5a:05:b0:37:e9:68:8d:40:3c:14:56:15:de:ac:e0:
28:69:2c:10:4c:81:73:55:07:09:3d:92:3d:79:b3:97:84:ca:
bd:e4:d4:4b:d4:da:22:3f:77:1a:9a:cb:59:ef:d4:56:a9:83:
86:d5:9b:a1:ce:a8:9b:9c:ec:3d:20:19:cc:22:ac:97:74:3c:
14:f0:8a:ce:de:f6:c0:8b:18:0b:bb:7d:78:86:5d:a5:7b:a3:
ad:ec:4e:7d:fc:95:db:26:15:9f:56:e8:0c:3c:c2:06:fb:ff:
b9:20:e3:02:e4:20:ef:44:04:a2:c8:b2:ed:c8:9f:2f:9a:dd:
66:9d:0f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:13:18 2025 by rpki-client