Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa
File: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (raw, json)
Hash identifier: CKOnFjtejKkcAYDWghd3LL+VK58zvWWige9ouAjv5Ws=
Subject key identifier: 72:33:95:B6:D3:6F:F6:8C:3C:EA:09:0C:86:9C:E0:AE:DF:90:6F:55
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 0770
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa
Signing time: Sun 08 Dec 2024 21:19:57 +0000
ROA not before: Sun 08 Dec 2024 21:19:57 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 141215
IP address blocks: 103.156.152.0/24 maxlen: 24
103.156.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Dec 8 21:19:57 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67560d7d-1159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:36:95:6e:26:8f:fe:55:d1:d7:66:a5:4d:
8f:f2:37:1d:96:e0:b2:e4:61:9e:b3:d8:a1:dc:e2:
34:f9:e0:6c:0a:60:40:24:cd:a9:24:13:a3:b5:5d:
37:6e:49:63:6c:a9:42:92:91:6d:c9:42:8c:5f:51:
d3:61:4e:5e:5b:42:cd:58:0e:fa:13:35:79:34:d9:
86:51:a1:8c:f4:64:f8:10:28:01:4f:cd:b0:4b:52:
55:f8:bf:8e:e6:31:4e:21:27:22:27:86:13:15:b3:
3d:6f:3e:01:92:6f:6d:76:91:64:34:b6:38:f0:a3:
42:c3:dd:bd:88:c8:b2:1c:1c:16:21:80:33:3a:53:
c8:04:1f:e7:26:4f:96:a0:cc:54:17:9f:f5:ed:73:
36:08:62:51:59:e8:5f:9f:40:8a:42:d5:51:4e:c9:
ff:dd:23:4a:82:42:01:e6:1e:17:3f:10:07:13:6b:
d5:1a:05:1f:89:b7:93:d0:4c:7d:e5:34:b9:1f:1c:
f1:29:7f:f1:07:eb:1c:b8:15:f3:9f:8e:2b:cc:fd:
26:a1:e1:8c:d7:40:70:39:53:7d:dc:d4:fb:6b:23:
17:5d:f5:e0:5f:1f:0e:7f:d1:0a:fa:c7:f5:a3:03:
89:2e:cd:ee:82:fe:b2:06:1a:1f:99:c2:fe:16:92:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:95:B6:D3:6F:F6:8C:3C:EA:09:0C:86:9C:E0:AE:DF:90:6F:55
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/D19E7784AAF811EE8D8CCD25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.152.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:2c:97:20:25:83:ae:cd:ff:da:1b:a5:3f:8c:45:51:25:03:
b9:28:2d:dc:d7:d0:e1:50:c3:60:5f:80:0b:c6:e3:67:bc:3a:
1c:fc:d9:68:f1:82:0b:18:46:6c:c9:73:79:c3:7f:07:71:79:
e6:37:02:2a:2a:0e:c0:ad:33:1b:5c:d6:4c:21:34:50:6c:03:
c0:34:a1:0b:5e:fd:57:88:15:0b:75:64:31:bd:24:57:d9:16:
69:1a:35:b1:38:28:ca:5a:7a:6d:ee:48:a2:e0:ef:24:8e:48:
d2:d2:0b:27:38:9c:a3:bf:08:12:bf:34:5c:fd:da:80:9a:2b:
a0:69:c8:00:2a:95:fc:21:b9:f8:a9:82:34:d2:4d:8d:39:1c:
c8:ee:3e:17:e5:40:fe:d8:4f:2b:c9:42:b6:ec:9f:ac:6e:72:
34:d4:54:d0:ab:81:dc:54:35:82:55:d2:3b:ed:5e:f3:08:37:
70:05:2c:af:b5:99:40:5b:82:11:04:2d:36:39:6f:6e:c3:d0:
fa:8a:9f:e3:c8:99:bf:11:23:f9:29:6e:5a:08:ef:0a:b6:51:
23:bc:37:d0:e5:f9:a4:88:8c:55:b1:7c:fd:4b:aa:a0:10:20:
5a:28:9b:f6:d0:09:b6:45:a6:e3:ea:02:3e:ab:2a:03:42:99:
b8:8c:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:12 2025 by rpki-client