Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
File: 5637146C507611EDB59D9E2EC4F9AE02.roa (raw, json)
Hash identifier: EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=
Subject key identifier: 04:91:5B:04:DB:6F:C2:17:E3:4E:37:DF:1A:64:49:23:1F:2F:14:F0
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 0194
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
Signing time: Thu 05 Dec 2024 02:16:34 +0000
ROA not before: Thu 05 Dec 2024 02:16:34 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 142420
IP address blocks: 103.12.96.0/23 maxlen: 23
2001:df1:69c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Dec 5 02:16:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67510d01-48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:73:7c:e9:b4:4c:11:00:1e:8f:3f:ce:e4:
5c:f1:b9:cb:d9:76:97:14:49:7b:e8:56:2f:cb:e7:
36:6d:4e:00:ab:4c:82:b6:1c:f3:9e:76:1c:c7:af:
e1:17:89:c7:ae:82:56:11:80:4a:4d:fd:ab:86:0a:
04:3e:d9:07:8c:76:1a:00:a3:7d:83:97:49:53:32:
12:b5:e2:8d:3f:28:a2:55:49:48:d8:56:dc:88:88:
0f:e8:c3:a5:d0:f9:9e:05:13:77:ce:33:ff:af:fd:
9c:6f:29:aa:b1:af:cb:67:76:4a:93:48:84:99:8f:
c6:e5:43:23:a5:af:84:c8:9f:cf:50:38:b2:fe:de:
10:74:16:17:78:29:22:73:57:29:f9:5e:b5:ab:32:
ec:f1:10:9f:7b:b9:fe:a9:c1:96:a0:2f:b2:56:e8:
49:6a:28:c6:a0:6b:65:0b:7b:ea:c4:14:e0:ff:f8:
df:87:58:d0:78:8c:85:d1:e1:63:4b:9d:d3:0c:dd:
9d:4c:40:0c:fd:59:33:2f:02:db:13:c2:1b:8a:0b:
56:bb:3d:b7:94:57:56:60:4f:88:24:64:62:0a:f9:
ea:cd:95:9b:bc:62:b5:76:35:2c:ae:38:aa:03:de:
0f:dd:df:7a:ea:d5:8b:36:0e:38:6e:09:73:4c:85:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:5B:04:DB:6F:C2:17:E3:4E:37:DF:1A:64:49:23:1F:2F:14:F0
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.96.0/23
IPv6:
2001:df1:69c0::/48
Signature Algorithm: sha256WithRSAEncryption
71:81:2e:68:0a:92:13:7f:56:15:25:61:ce:78:c7:3b:f3:97:
a7:66:9d:3d:42:fc:21:32:36:9f:62:d5:86:63:b9:d8:9b:df:
69:d2:3f:08:f3:ce:68:d4:a3:1d:c1:bd:df:1f:01:e1:d4:9e:
e4:68:7f:34:1d:9f:c4:69:9a:57:5e:bf:b7:69:19:6d:9a:4d:
48:7e:2c:8c:6f:33:56:28:72:e0:6f:c2:86:89:2c:4e:10:68:
e8:0b:44:91:b0:78:be:bb:48:c4:57:ca:53:44:ae:a7:02:cf:
58:d6:f3:2e:dc:91:c0:f2:da:89:19:d4:0b:f5:09:60:22:f0:
08:46:e8:72:e0:5e:af:77:0c:93:2a:6d:4b:17:a6:3d:5d:c4:
21:82:a6:e6:d1:7d:17:77:7e:31:17:80:c0:aa:be:87:8f:e3:
8d:86:19:67:67:39:cc:5e:66:12:44:fb:ff:db:66:a8:71:60:
da:75:f0:9c:ab:55:a8:77:8c:4a:f5:f5:4f:83:74:70:5e:96:
76:6c:36:25:3f:5b:a2:73:e7:f2:af:fd:6d:88:27:09:bc:a7:
3d:03:80:b0:c7:02:27:81:7d:e2:b1:57:c3:be:64:cd:61:ae:
7b:7d:cf:65:dd:33:1e:43:56:34:52:88:d2:2b:eb:b1:40:2a:
aa:67:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:26:54 2025 by rpki-client