Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
File: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (raw, json)
Hash identifier: Rrqo0fHhyR6JUNrP9MMcsUE6hhp2tronEE70lXIOPYI=
Subject key identifier: 59:E0:94:DF:3B:55:16:C9:50:AB:F2:1D:A2:08:0E:AD:99:94:6A:1B
Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial: 0A49
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
Signing time: Tue 14 May 2024 20:59:34 +0000
ROA not before: Tue 14 May 2024 20:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139069
IP address blocks: 103.139.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Validity
Not Before: May 14 20:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6643d0b6-4452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:5e:76:76:d7:48:d7:70:59:40:43:fb:d9:
48:ea:dc:b6:b6:22:4e:85:ff:3e:83:b1:66:ef:aa:
c7:ce:cf:6f:4b:0c:37:bf:98:43:74:7a:90:90:4f:
2a:ef:f9:89:09:76:3d:74:6b:2d:b1:e4:a5:60:1e:
42:b3:18:9f:15:45:34:58:a1:d8:2c:e5:57:2c:24:
5c:ef:21:4e:ff:d9:69:00:3b:15:21:ea:a9:48:62:
36:f0:72:f7:c6:ca:6d:dc:3c:76:25:a9:2f:d0:62:
c1:9b:c5:f2:b1:5d:52:7b:11:83:7f:5d:dd:76:34:
67:0e:54:6c:d5:6e:3a:cd:d3:79:8a:20:98:7d:73:
5a:ed:9a:ff:49:ce:cc:7d:19:4b:8f:5c:af:84:3f:
c5:53:bd:69:71:c7:63:a3:5c:ca:be:5e:3e:e9:e1:
cd:b1:ba:80:8f:c8:ff:cd:b5:44:d9:ba:d0:c9:b1:
c8:a2:42:54:30:fd:6c:42:5a:ad:fe:20:08:d6:b5:
b2:69:80:cb:84:8d:f0:3f:c1:b9:3e:5d:a6:b3:28:
c1:e7:a1:e7:fe:c7:59:25:b1:44:d0:60:77:b1:8f:
1e:95:e6:d5:2e:53:c3:f2:b3:a9:82:92:d6:bd:b0:
dd:b2:fe:07:4f:80:10:75:29:39:14:85:ff:e9:27:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:94:DF:3B:55:16:C9:50:AB:F2:1D:A2:08:0E:AD:99:94:6A:1B
X509v3 Authority Key Identifier:
keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/784507FC9F4211ECB5BC4D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:27:e3:d8:e2:32:fd:a4:72:f0:72:cd:6a:67:dd:87:06:c1:
29:7d:11:28:d1:25:59:d2:af:f7:c1:9a:bc:f2:7d:20:b7:8b:
c3:64:de:05:63:74:17:97:bb:14:3b:c8:dd:84:34:81:c9:d7:
b6:4d:89:25:63:b9:e6:ac:34:ab:21:9d:9d:de:92:d2:58:ae:
08:2d:3c:2e:3f:06:c5:d2:31:77:57:47:ae:a8:54:ea:df:02:
c7:dd:0b:7b:80:e4:0b:44:cc:84:91:78:ec:4d:e1:cc:52:3c:
20:f9:7b:ea:9f:c9:31:0b:cc:54:c9:b3:7c:52:65:1d:b8:15:
6a:fb:79:f1:1f:75:1c:65:f9:7b:ab:4d:9d:76:9c:0b:88:ea:
58:1b:9d:f5:89:01:90:95:13:7d:b9:56:b6:ee:89:75:38:53:
8b:2f:91:20:42:a8:1c:ee:72:98:31:6f:bf:1c:92:5f:5b:e5:
9c:24:ec:b3:93:42:7c:05:c9:43:ea:5e:19:70:ec:a4:12:d9:
51:90:01:62:64:67:56:39:a1:17:b9:9f:c7:ea:d4:d8:d8:ed:
cb:0f:dd:41:e7:c4:e5:86:6e:13:02:f9:e7:19:66:48:9b:83:
d9:c0:a0:6c:8b:79:72:0b:ff:1f:ae:37:d4:2b:00:23:c4:38:
70:03:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:50 2025 by rpki-client