Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
File: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (raw, json)
Hash identifier: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=
Subject key identifier: D7:16:8D:CF:89:94:AF:05:2C:FC:05:8D:58:8E:49:17:70:D0:69:F4
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 087B
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
Signing time: Thu 02 Jan 2025 20:19:42 +0000
ROA not before: Thu 02 Jan 2025 20:19:42 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.149.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Jan 2 20:19:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6776f4de-71c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:0e:c1:55:28:af:ac:83:46:12:03:e8:7a:
f0:1c:b5:f7:9e:35:71:07:34:e3:f9:6f:42:ca:23:
76:b2:07:ac:89:ca:d5:8d:d7:83:94:3f:7a:f5:11:
35:5a:35:78:d5:b1:fd:20:20:4d:f6:98:c1:10:17:
8b:75:a5:26:52:78:36:58:d5:e4:64:f8:45:1e:00:
f3:58:9a:93:c8:a6:5f:60:78:06:e4:c0:be:6d:8b:
0c:66:5a:ef:90:bc:f5:cf:86:28:6e:c1:1c:66:73:
67:74:f8:33:9a:61:75:5d:31:32:e0:1c:4d:66:3f:
10:dc:80:c8:b4:e9:cc:c1:58:f3:01:d0:1c:75:8e:
9d:a6:00:1d:fc:af:8c:f7:31:3a:2d:6d:72:c6:5f:
88:49:83:d1:47:21:a2:f8:c5:4b:5f:6a:b8:1a:7e:
76:c0:2d:04:3b:24:b9:7e:ea:5f:8a:48:44:ad:ec:
a9:8c:89:07:e3:6b:fc:f4:43:3c:aa:b1:ca:16:c8:
1a:0a:87:6c:72:a2:27:dc:42:e5:5d:d7:29:53:8f:
94:c1:96:bf:83:85:57:ad:4f:e5:d2:6e:be:0a:92:
3f:75:0c:b8:a8:5f:22:dd:f9:0b:3d:d0:d9:4a:91:
1f:c6:d5:90:57:84:35:ac:e0:ae:83:21:56:97:be:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:16:8D:CF:89:94:AF:05:2C:FC:05:8D:58:8E:49:17:70:D0:69:F4
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2A7A051EB54B11EA85EE266DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.112.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d0:40:fd:f3:58:ae:a8:cc:4c:80:29:d0:98:57:b7:ec:c2:
dc:b8:3f:53:be:9f:85:d7:36:b5:c5:ed:63:d6:53:55:2e:b1:
fe:e1:d4:15:26:d1:12:e9:ef:b4:66:e2:16:a7:06:58:9d:05:
38:76:ca:9c:0e:f3:59:58:8b:6b:66:e6:4b:c1:b6:04:4c:28:
3d:2a:c0:d2:f6:a9:aa:c1:6a:78:88:ed:bd:bc:8c:8b:72:26:
23:6f:99:07:64:62:ea:6f:24:61:ae:c0:62:75:98:01:f0:69:
20:88:78:38:25:e8:61:ac:bb:41:6b:b8:25:66:81:fe:be:0b:
86:18:13:57:37:ec:0f:c0:2a:58:e5:74:b8:17:07:0e:af:9e:
c1:b4:98:57:26:95:28:10:81:55:26:6f:45:26:5f:97:66:20:
fa:33:1f:e4:0f:d6:fa:7e:1c:c8:bc:47:41:c9:44:dc:fe:5b:
02:02:02:e7:2c:d0:cb:61:8d:53:30:1b:f6:b0:db:92:3f:ee:
b6:c1:21:25:fe:e6:e8:89:5d:3e:bb:04:80:ca:83:aa:7e:07:
cd:44:96:e4:95:8f:30:e6:78:d6:b8:85:c8:8f:88:69:f0:87:
6b:4d:38:1e:d2:33:3b:a2:b7:c6:70:a5:0c:89:05:3c:55:90:
02:c1:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:43:34 2025 by rpki-client