Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
File: B49D829014F411EA96EC5874C4F9AE02.roa (raw, json)
Hash identifier: V1tC0MfEENnmWJmQHsKngVqk62NvpQbP2E538Q1fAlM=
Subject key identifier: 38:9C:84:34:20:97:BA:E2:CF:1C:F5:4E:A2:FC:34:23:52:CE:48:FF
Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial: 0BA7
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
Signing time: Fri 20 Dec 2024 19:07:22 +0000
ROA not before: Fri 20 Dec 2024 19:07:22 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.145.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Validity
Not Before: Dec 20 19:07:22 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6765c06a-bbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:d6:fd:ba:cd:8c:10:44:00:4b:7f:dc:11:
d4:dc:a6:51:8a:92:09:d1:b5:78:b6:4b:aa:40:13:
3a:a4:32:19:7a:a7:fb:5f:76:cc:c3:b8:dc:08:75:
80:c2:51:57:3d:7b:12:ba:3d:ad:08:3c:53:86:2d:
0c:a4:37:ce:aa:51:d1:7d:fb:33:2c:05:81:93:8e:
8d:7d:93:58:8d:33:fd:5c:a1:a6:d8:20:27:74:41:
76:87:21:79:1b:d0:c0:7f:9e:a7:d0:46:1d:40:61:
cf:cc:00:73:05:b6:2a:87:98:0a:e1:9f:00:e3:bb:
32:5c:d2:99:2d:49:70:d5:77:f4:fa:0d:92:6d:73:
c3:be:f4:ec:3b:af:2b:81:6a:60:5a:d9:69:79:98:
eb:0d:e6:49:cb:03:99:8d:fd:35:74:67:84:43:5c:
5f:23:65:57:4f:34:b5:12:99:c9:9d:c1:2a:1f:a7:
bb:a0:15:c8:01:50:08:88:15:6a:d5:b5:85:58:0c:
2a:a6:b3:b3:24:b8:f9:7d:0f:66:ee:87:02:80:8d:
54:35:c9:97:0d:33:ba:10:a0:9e:d8:ce:c0:7e:22:
66:db:c2:8f:ae:46:6d:72:f0:06:94:d4:21:6c:87:
1f:b0:d1:be:4e:0c:60:b1:c2:65:0d:85:66:63:a6:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:84:34:20:97:BA:E2:CF:1C:F5:4E:A2:FC:34:23:52:CE:48:FF
X509v3 Authority Key Identifier:
keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/B49D829014F411EA96EC5874C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:55:2b:c0:97:5f:00:f5:f2:55:eb:f7:dd:97:dd:c3:89:17:
59:88:b8:00:57:5d:63:e3:93:64:f6:b8:7f:4a:fc:68:be:1f:
a0:7e:0b:12:8d:5d:96:7c:77:0f:0e:53:6a:d2:cd:70:b2:36:
3b:7a:a6:43:ea:f1:4a:08:ef:08:0b:27:ae:c2:63:2d:3a:d4:
fc:57:d9:f9:95:2f:b1:db:44:fa:64:63:b6:1e:97:12:f0:58:
8c:21:75:92:f5:25:55:80:3b:dd:4e:38:d1:cc:4d:d7:3f:2e:
82:b7:81:5e:59:91:a9:ec:81:14:a9:c5:f7:e9:90:59:0d:91:
00:1c:3b:9a:1a:61:97:b3:a2:76:a2:d2:aa:45:67:94:64:6c:
8c:15:f1:3e:61:2d:0e:3c:db:56:9c:15:90:16:67:8c:7e:a1:
6b:90:d2:f9:1a:28:ad:92:a4:b7:ea:ae:aa:9b:97:8a:12:b4:
ef:c5:7c:44:19:a0:06:fe:a8:7a:98:9c:24:b6:58:a5:7c:fc:
06:ce:0d:09:1b:b8:0e:77:af:b7:58:50:a1:75:bb:fc:44:cc:
7e:ac:b5:e5:19:56:c7:06:43:1b:6a:d7:87:d6:b7:69:20:6c:
28:d4:e6:db:77:df:84:f7:39:38:38:ce:e9:41:36:05:06:a8:
37:a7:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:40 2025 by rpki-client