Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/002EAE98D49311E997CAE52BC4F9AE02.roa
File: 002EAE98D49311E997CAE52BC4F9AE02.roa (raw, json)
Hash identifier: bl9dVIN3Lch5GhjF7DxFUXIR57anV3IMuX/4gETtdJo=
Subject key identifier: 65:7C:26:C3:BB:72:9A:7B:10:D8:AD:4D:31:AF:10:13:91:24:72:D2
Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial: 0D07
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/002EAE98D49311E997CAE52BC4F9AE02.roa
Signing time: Thu 30 Jan 2025 18:07:04 +0000
ROA not before: Thu 30 Jan 2025 18:07:04 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 138529
IP address blocks: 103.127.254.0/24 maxlen: 24
2001:df0:eb80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3335 (0xd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Validity
Not Before: Jan 30 18:07:04 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bbfc8-b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:5f:b6:45:9f:98:b3:8a:a8:e2:74:b1:ef:
71:03:f1:fb:08:2b:ce:a2:a3:e3:07:7f:b6:7f:9d:
48:54:09:c4:2a:8e:c7:4b:bc:62:22:d3:69:c0:e7:
6a:7e:cc:3b:71:a4:39:76:2a:77:80:ef:39:09:23:
0b:ef:14:21:f4:b7:7d:0d:80:ba:f5:ab:6f:07:7c:
4f:f9:b0:73:34:95:f5:1a:73:40:01:83:52:0b:a5:
11:10:02:f3:1f:b7:ec:04:2f:9f:4b:01:59:bb:4d:
89:b7:42:bc:d0:b4:17:ec:b9:91:8a:4e:2c:cb:64:
3a:e0:d5:95:39:6c:24:16:92:96:86:2f:5b:0c:79:
99:0a:5f:49:97:9a:55:0a:68:c4:59:c6:e1:23:27:
52:6a:99:2b:8e:e4:f7:2b:26:6d:b8:d2:61:88:84:
59:5e:2e:17:aa:cf:6c:24:df:36:56:9d:31:81:18:
65:a5:84:d2:3c:09:d9:15:65:9a:68:f0:d6:39:7e:
41:61:44:91:27:25:a8:99:67:60:f8:6b:82:be:d5:
92:84:a4:6d:eb:e8:0e:2f:bb:d7:f4:be:0d:20:be:
8c:2a:4f:92:bb:1e:ed:02:09:b5:8a:df:94:a5:c6:
b7:69:2f:0a:5f:90:db:8e:f6:d5:3b:68:08:6b:38:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:26:C3:BB:72:9A:7B:10:D8:AD:4D:31:AF:10:13:91:24:72:D2
X509v3 Authority Key Identifier:
keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/002EAE98D49311E997CAE52BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.254.0/24
IPv6:
2001:df0:eb80::/48
Signature Algorithm: sha256WithRSAEncryption
4b:45:bd:60:58:33:f4:0a:2b:44:81:a0:06:19:d6:8e:61:7b:
ba:b0:7d:fc:6d:e1:7a:c9:68:df:ab:bd:61:89:4c:ea:34:9a:
c6:84:ee:94:b9:e4:d8:6f:7c:fc:83:7d:7c:65:95:54:36:89:
bf:d1:7a:78:ac:a9:f4:e3:aa:9a:5c:8e:f5:7a:a6:31:18:2f:
e0:08:b1:ee:4c:c7:f8:34:db:61:fc:63:b5:f7:aa:bc:24:97:
be:7b:bf:1f:20:6d:ca:29:d6:ac:08:5e:e3:dd:48:1f:aa:f2:
38:e4:d0:d7:ce:64:c7:cc:d7:52:4d:1a:bc:80:f7:f3:d1:2b:
4b:b4:b4:9e:5d:1d:1e:12:9c:2a:bc:d7:58:1d:63:0f:b6:55:
d0:09:34:b7:8e:69:31:97:5a:5c:a4:a3:46:9e:70:5e:2b:06:
69:62:12:da:a3:7d:0b:d7:c2:85:1d:e9:98:75:6b:e2:7f:17:
ae:a5:9e:05:be:4e:e5:b6:79:37:aa:8d:67:9e:e2:89:46:8d:
d4:c3:ec:21:a9:6c:39:de:10:e6:d3:aa:99:7c:22:af:f7:5c:
ff:aa:12:5c:e1:27:e2:1e:15:21:b4:f0:88:a6:49:9f:09:9e:
78:32:9a:fc:9b:1c:a2:65:48:a5:56:a2:a1:9d:dd:6b:24:9a:
e3:3d:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:45:55 2025 by rpki-client