Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
File: A445EAA0B5B911EC8AADD413C4F9AE02.roa (raw, json)
Hash identifier: Y2n2BjZK7YcDbJf+OeJwUoZderld4t4C424W9hVCQCo=
Subject key identifier: 82:ED:68:0C:FC:D3:A6:4E:87:69:78:AA:42:26:7C:D5:C9:80:04:72
Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial: 027F
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
Signing time: Mon 19 Feb 2024 03:25:03 +0000
ROA not before: Mon 19 Feb 2024 03:25:03 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 139743
IP address blocks: 103.84.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Validity
Not Before: Feb 19 03:25:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d2ca0f-654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:8c:aa:20:4f:fb:18:31:57:18:5e:a7:61:
58:1a:af:25:f5:1c:a6:07:6f:fc:9b:5a:88:5d:2e:
29:54:dd:b8:e4:bc:2e:5b:97:8e:38:15:b3:08:89:
15:a4:a4:e0:0d:37:5f:dc:0a:37:d6:32:e8:f5:cb:
1d:87:58:cf:9b:fc:aa:27:b6:cb:11:73:b6:f1:ad:
ef:75:07:c6:39:41:dd:38:e9:0a:c8:d0:a5:d4:d9:
be:05:14:22:52:03:50:ef:90:af:37:3b:24:2f:bb:
83:19:94:74:f4:52:fa:82:6a:50:af:b8:80:28:7f:
db:a7:6a:ba:12:51:5b:f9:ed:be:7b:bc:b5:d0:ab:
af:42:b2:b5:a6:30:fc:a8:6c:a5:97:24:d0:fa:4a:
a0:89:5d:e3:15:20:62:fd:9e:d2:3d:94:28:29:28:
a3:2a:61:cd:e3:80:d8:00:2a:d0:d6:83:39:03:43:
05:a7:27:90:a8:3a:73:a1:cc:14:33:b8:27:09:7c:
2a:a5:cd:03:84:9c:38:7b:9b:46:b4:7c:93:89:7f:
b0:05:e7:c5:d4:a5:45:d7:2f:58:bf:96:0b:e6:9f:
f0:8f:38:90:a2:89:bf:6f:2a:4e:f2:ca:64:75:8e:
be:0b:23:11:2a:91:77:2b:f8:6d:1a:90:28:d9:18:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:68:0C:FC:D3:A6:4E:87:69:78:AA:42:26:7C:D5:C9:80:04:72
X509v3 Authority Key Identifier:
keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/A445EAA0B5B911EC8AADD413C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.136.0/22
Signature Algorithm: sha256WithRSAEncryption
20:cf:58:e4:e7:15:0d:b1:2b:b2:30:5a:7c:9a:5b:1d:2e:67:
3d:37:16:8a:28:ae:4f:ca:18:1b:e8:46:a0:5e:6b:e0:96:58:
ed:f8:cf:c1:1f:57:26:01:35:5c:c4:80:64:3b:b4:bd:6c:11:
6a:b3:37:e4:36:b3:48:f0:ed:9e:ff:8e:b7:35:a5:89:2d:47:
8d:c0:27:a6:30:13:35:d0:4f:04:b1:04:7e:be:cd:1c:8b:8e:
28:40:59:f3:fa:99:8d:62:a8:a8:2a:71:95:97:03:3f:11:60:
17:ec:c2:00:0b:70:f7:4d:de:4f:a7:7a:cb:e1:38:38:00:2a:
d4:e5:b7:a8:97:d2:3b:c1:51:c3:4e:fb:1f:8a:b7:e9:31:c9:
c8:cb:bc:ad:3f:c1:d6:06:ed:40:c0:1b:34:b5:c4:44:0c:0d:
21:14:69:41:7b:45:85:99:eb:97:13:4a:b8:08:ac:93:06:93:
d2:a1:7b:32:71:53:b8:2d:2e:39:17:a5:4d:b7:dc:ca:b2:be:
11:dd:ec:a3:4f:cb:fa:29:16:18:09:61:16:35:2b:d4:cc:9c:
11:a9:51:33:75:4e:c7:58:6b:19:ac:d8:3e:16:7b:90:3f:ef:
b2:a3:49:c0:a3:e2:80:3b:60:96:63:fe:bd:94:07:ac:65:11:
37:ee:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:57:52 2025 by rpki-client