Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
File: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (raw, json)
Hash identifier: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=
Subject key identifier: 9C:C0:8C:55:09:75:4E:64:B3:21:DB:23:BB:50:84:CE:CB:BC:53:FB
Certificate issuer: /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial: 04C1
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
Signing time: Fri 25 Oct 2024 00:14:37 +0000
ROA not before: Fri 25 Oct 2024 00:14:37 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 136427
IP address blocks: 103.155.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Validity
Not Before: Oct 25 00:14:37 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671ae2ec-96e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:21:ee:15:d9:ed:2c:44:e8:8d:05:3e:d3:
1b:6f:b1:d9:99:8c:90:57:29:af:ef:c4:de:d4:33:
84:9c:c7:16:81:d4:61:92:c4:83:36:90:ad:25:56:
89:26:02:29:88:ed:d8:63:f8:e7:00:9a:b7:36:46:
ce:f5:bb:2c:8c:c2:df:68:cb:9b:ae:7e:b3:93:16:
de:3f:a7:83:7f:2c:35:ba:ec:e1:a9:8c:1e:77:e7:
9a:2d:ea:e1:e5:1d:4d:ee:35:1d:70:25:a9:fb:50:
66:05:ae:a1:9d:bc:ce:9b:d9:57:5e:d1:88:a0:39:
15:c8:20:01:66:58:95:ff:79:ac:38:47:a2:25:7d:
39:64:c5:46:1d:80:a2:e5:25:83:96:fe:c3:98:e0:
a5:c4:03:ac:78:d3:71:e5:95:d8:cc:3b:77:1e:2d:
12:c2:a6:fe:30:5b:4b:85:b6:da:80:fa:46:82:5b:
7d:f9:50:b0:72:c5:df:54:b1:5d:3d:4e:fa:74:2b:
07:13:7c:6c:57:b0:c2:2c:cb:da:a2:8a:93:40:30:
b3:ab:8b:1b:7a:79:25:85:95:19:39:9d:32:28:47:
e7:44:03:5c:c1:d2:0a:64:15:10:ac:95:9d:71:0a:
f1:57:9d:be:f7:34:58:06:f4:31:79:41:d5:92:32:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:8C:55:09:75:4E:64:B3:21:DB:23:BB:50:84:CE:CB:BC:53:FB
X509v3 Authority Key Identifier:
keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/D249CE5EFE8911EBA7BEB564C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.145.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c9:13:33:bb:4d:26:c0:e0:be:6c:a1:41:28:a2:f2:6a:e8:
5e:2d:78:bd:1d:4e:41:2e:26:44:53:77:cc:78:bf:1b:ed:da:
d1:b8:33:4d:64:8f:04:95:fb:4e:cb:52:f2:05:d4:88:81:a9:
e4:a1:a3:d7:16:d5:13:2d:f1:81:83:bd:98:11:79:7a:2f:12:
60:f2:84:49:a9:9f:e6:01:ae:cf:ca:ec:ba:81:cc:d2:56:1b:
78:82:6c:65:d0:ab:4e:d8:0a:84:94:ed:79:b5:f1:fc:68:41:
06:18:86:1c:0c:28:a3:53:8b:2e:db:76:66:bb:e9:72:82:e9:
a7:d7:e7:da:d9:31:a8:d4:b8:64:bc:d2:8c:5a:76:4d:d4:20:
1b:d7:58:22:42:a2:1e:eb:0b:0c:73:10:1d:c8:9e:2d:88:c7:
ea:c1:1c:f6:31:78:8f:ed:39:74:54:5e:92:52:6b:97:de:c8:
2c:2b:31:78:03:ed:23:18:f0:25:6e:38:e4:ad:f6:ed:8e:50:
4a:d5:b7:2c:9c:0c:9f:0d:c4:a3:a3:03:4c:c3:ea:f9:3f:01:
f1:f7:af:cf:c6:31:9b:8c:b0:e6:ad:35:39:d2:a5:16:da:c8:
43:32:08:c7:6c:55:d9:f7:dd:f8:c5:b8:7a:26:9a:91:37:18:
8e:97:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:29 2025 by rpki-client