Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
File: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (raw, json)
Hash identifier: Rn9Uh4xIBG/ELFJbB+TsiCtOSaEAuuI7pRPZ7eAmAvE=
Subject key identifier: 3F:19:2E:3C:57:1D:83:31:1E:15:30:FC:0F:95:89:41:30:FF:B5:EC
Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial: 112C
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
Signing time: Thu 30 Jan 2025 17:34:57 +0000
ROA not before: Thu 30 Jan 2025 17:34:56 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 138466
IP address blocks: 103.126.52.0/22 maxlen: 24
2404:5c0::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4396 (0x112c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Validity
Not Before: Jan 30 17:34:56 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bb840-5520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:c1:0a:7b:7e:c5:af:1f:10:61:29:93:1c:
9c:f3:60:a1:f6:f9:79:b4:a4:8a:c2:8a:9c:ee:7d:
b9:ca:27:42:91:42:0f:0e:d4:3b:6b:28:22:96:23:
4e:9a:58:bc:68:45:a5:1b:4d:ee:fb:9c:42:81:0f:
9a:34:29:99:62:5e:ef:5c:5d:91:25:20:6f:6a:19:
ca:13:a6:88:72:ad:82:e9:de:95:86:77:5b:90:09:
d5:9f:70:2e:18:56:20:a1:02:04:6c:8b:ac:a3:7a:
8f:21:68:49:00:e9:a0:8a:43:65:49:25:4f:ce:d9:
82:e3:f5:5a:eb:cd:a3:da:86:ae:86:f8:1f:93:53:
49:57:9b:14:62:d3:5e:94:b3:79:61:a4:69:35:07:
1f:7e:6b:a8:57:fe:61:5b:70:bd:0e:6f:75:80:f2:
d9:79:0e:26:42:54:bb:da:4c:ad:72:3e:60:fd:81:
3b:99:88:82:3e:7a:f7:1d:c2:62:91:6c:67:cb:cc:
62:e8:01:be:b1:4b:76:85:99:6d:6c:a9:d3:2a:44:
b5:e6:9c:e3:7f:2c:71:bc:21:82:ef:aa:c0:a8:f5:
07:db:8d:33:69:5b:ce:f2:bd:e6:ba:33:9e:8e:e3:
ec:a8:12:f5:2b:b1:d1:d9:a2:bf:35:16:02:d5:39:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:2E:3C:57:1D:83:31:1E:15:30:FC:0F:95:89:41:30:FF:B5:EC
X509v3 Authority Key Identifier:
keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.52.0/22
IPv6:
2404:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:4a:b7:85:a3:09:cd:85:c9:87:88:c8:cd:96:e1:7f:9b:63:
a3:48:de:c3:50:d4:8c:c9:94:07:c5:6a:66:91:5e:22:09:20:
39:da:cf:e6:1a:f9:6a:30:13:7e:85:e3:3f:51:a0:ad:31:06:
59:0f:42:33:74:ac:71:cf:3a:de:a1:5c:09:2f:f5:22:18:c4:
a9:6c:b1:fb:7a:07:cd:fd:e4:e5:4c:31:58:ec:20:79:a9:c8:
bb:48:97:d0:b6:1d:f8:c0:87:53:f1:d5:11:25:d3:9d:6e:14:
d9:ab:90:0d:17:97:44:99:61:38:54:2a:0a:57:a6:e9:69:45:
1d:9a:c8:4b:76:e1:93:01:d2:fa:4f:37:91:7c:06:ed:18:39:
44:cd:3d:19:9b:c6:02:28:4e:a6:a8:63:5d:a3:4e:38:1b:cf:
92:dc:1b:6b:74:76:37:97:30:89:9b:22:e3:00:8b:16:63:bc:
02:49:eb:fc:76:83:8c:12:a9:4f:87:4b:19:dd:08:10:f5:12:
79:fc:64:b3:58:59:c2:0b:15:45:05:54:69:3c:f9:88:cf:6e:
dd:90:ea:51:fa:e1:ae:b2:90:6b:93:e7:af:ff:97:4e:ed:4a:
23:35:bf:64:0d:bb:11:df:bd:be:03:a9:c7:77:11:8f:47:1a:
00:b0:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:24:33 2025 by rpki-client