Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
File: 45A44C4CBDCE11EFA998797CC4F9AE02.roa (raw, json)
Hash identifier: F+vUixdhEfte92jDbnACIhmoY8v6FEa49jFT7JSb05o=
Subject key identifier: CC:5B:A4:CC:5D:58:6F:D7:72:03:5B:16:35:0E:9F:EA:9F:B8:A9:65
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 06F0
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
Signing time: Thu 19 Dec 2024 05:59:37 +0000
ROA not before: Thu 19 Dec 2024 05:59:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137580
IP address blocks: 103.154.12.0/24 maxlen: 24
103.154.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Validity
Not Before: Dec 19 05:59:37 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6763b649-6805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:f3:4b:24:f5:1c:b7:f5:e8:18:24:1b:71:
21:77:86:0c:fb:59:3b:80:a6:7e:1d:7e:71:32:26:
9c:a7:ee:9d:a9:df:2b:e5:3f:1e:f9:3b:fb:73:5d:
7f:69:46:82:1d:55:05:3b:2a:ba:53:a7:a0:28:a3:
04:d1:5f:d8:bd:28:ac:31:d0:82:43:ab:76:14:fc:
f2:6a:1c:e4:d8:00:9e:7a:44:90:a9:f0:89:dd:f2:
74:24:ef:19:52:91:b2:a2:19:c2:22:7a:0a:86:8e:
80:ac:9c:31:a1:74:7a:be:ae:ec:a4:f4:5f:29:69:
88:af:fc:68:e2:f6:7f:4d:19:36:94:61:46:04:de:
1a:0d:c5:10:9d:60:55:5f:ad:35:7b:f2:97:7f:14:
fb:49:69:19:20:17:e4:e0:de:d1:80:d7:f2:56:f1:
1c:6b:28:09:bc:d6:d1:cc:36:20:b0:14:52:1c:90:
9c:c8:8d:42:ba:a9:49:a7:43:be:5a:3b:0c:35:3c:
2f:6f:57:5c:1e:3e:7b:bf:12:0c:e6:96:a1:55:a5:
41:ff:ba:14:21:8b:69:f3:c5:32:3f:ad:bd:3e:c0:
12:d3:6b:1d:52:eb:e8:66:50:3b:38:b5:48:c7:2c:
1d:38:8e:3f:02:51:43:b6:b1:71:d7:7e:a1:56:16:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:A4:CC:5D:58:6F:D7:72:03:5B:16:35:0E:9F:EA:9F:B8:A9:65
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.12.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:19:d3:81:21:d4:3f:c5:2a:ab:f9:3a:86:40:34:0c:20:66:
61:1a:7b:3d:50:4b:0c:9a:68:65:30:fb:60:9e:72:68:b7:c1:
84:19:36:04:db:51:9f:68:65:7a:4a:e2:bb:ad:d2:53:06:05:
3c:56:9a:89:e9:c3:e9:72:ad:21:5c:bf:6e:c7:87:89:24:70:
8b:c8:09:78:5a:ce:63:1c:9e:42:f6:6d:73:24:43:39:c5:ed:
38:06:48:70:ee:d5:b3:70:68:c6:28:01:7d:6d:3b:f9:79:2e:
11:b7:2b:39:4a:58:2c:d4:85:b8:11:99:a1:34:cc:fe:ed:7b:
a0:af:fa:9c:01:bc:cf:d0:f6:11:36:b7:ef:92:70:2b:d2:cf:
46:7f:55:8f:04:d7:8d:78:b7:2e:5f:26:e1:7d:2e:2c:6a:18:
d5:9b:43:44:f7:b2:7b:7d:04:49:7a:ad:37:9c:b7:7d:01:d9:
89:c8:4c:70:60:3e:93:96:89:b2:1e:4b:c4:3b:50:d3:cb:8e:
d0:7b:a1:f4:79:fb:05:0a:46:72:39:fa:c5:4d:4b:83:8d:cf:
2a:25:f6:ec:ef:57:6a:b3:e0:a4:44:8c:a8:71:f5:a5:ed:b7:
30:90:85:2a:80:b6:eb:d6:f1:65:a4:d1:63:a0:f7:be:af:75:
10:c1:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:00:47 2025 by rpki-client