Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa
File: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (raw, json)
Hash identifier: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=
Subject key identifier: CE:5D:80:BB:21:2E:6C:D8:AC:A0:B3:5E:31:41:FB:24:47:D8:4B:C4
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0415
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa
Signing time: Thu 05 Dec 2024 00:03:44 +0000
ROA not before: Thu 05 Dec 2024 00:03:44 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141731
IP address blocks: 103.159.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Dec 5 00:03:44 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750ede0-ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:3d:6c:bd:f0:d7:4a:ec:8b:4a:e0:a9:3d:
72:ad:18:b5:9d:ba:28:27:e5:d5:67:4a:ce:46:6a:
8e:11:72:b2:be:84:02:50:01:96:2e:bc:44:62:db:
96:be:98:ca:be:51:26:1c:6a:48:5f:89:f0:94:e7:
67:2f:c4:14:d8:79:68:59:f0:19:0b:50:f4:73:68:
3a:d0:a0:41:04:19:01:11:41:b6:cf:fc:e1:d8:e8:
96:8c:d9:0a:8e:9a:dd:f1:ba:e6:7a:d6:eb:59:d1:
0a:b9:c2:89:10:61:5c:5f:b0:c1:04:f2:cd:62:28:
1a:ee:19:3c:05:d9:28:0f:b2:23:de:72:cc:a7:59:
b8:80:c8:7a:21:b1:09:72:c0:5b:83:31:e4:08:ad:
95:16:d9:12:0f:23:d7:2f:df:8a:02:29:37:87:44:
e6:15:92:b0:29:f5:b6:ce:e6:25:70:53:5f:1a:3d:
31:99:53:a0:0d:dd:cb:76:55:c2:f7:71:15:d4:cb:
ce:66:f0:15:de:d4:45:29:73:6a:36:4d:e2:ce:0f:
20:82:d1:96:e2:3b:e4:f0:2e:66:6e:bd:23:95:25:
c8:ea:74:f4:ed:ee:81:c7:ac:bc:b5:e7:36:47:ce:
4e:18:cb:29:7c:7d:09:d8:fa:d6:d0:02:d3:c2:00:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:80:BB:21:2E:6C:D8:AC:A0:B3:5E:31:41:FB:24:47:D8:4B:C4
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/4CC86698C4FA11EE86A51C0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:92:67:40:b7:c8:e2:fb:12:c5:0c:8b:25:fd:dd:5d:d2:dd:
29:a1:25:1f:cc:8c:4e:6e:d2:b1:d3:51:de:94:3d:27:b8:17:
fc:49:9e:cf:c8:49:92:96:a4:3c:ce:ce:9d:44:ee:1e:38:df:
f5:d3:6a:72:0a:1a:6c:a7:ee:c0:ed:02:32:17:9a:82:e4:39:
6f:29:79:82:3b:04:39:15:dc:e7:c5:d0:e4:c2:e4:f6:46:e1:
97:c0:12:b1:04:9e:49:c7:5f:76:75:5f:26:4d:ac:a3:25:11:
44:70:79:86:2b:3b:79:95:11:4e:42:7a:8e:54:83:37:e1:9b:
9a:b4:f1:e8:a5:4b:c3:9c:5a:7a:f6:e8:f4:d7:fc:8b:ae:5a:
06:5c:c8:e9:4e:94:ba:57:e1:5a:42:8b:4d:14:b7:76:fa:16:
dd:60:99:23:49:82:ba:37:85:da:a3:bf:85:c8:5d:eb:e8:38:
10:9a:5f:51:cf:4c:ba:eb:42:e2:c6:d9:41:3b:e6:66:cf:0f:
23:ed:59:8d:43:78:5d:ca:9a:e2:b6:c1:59:79:a0:31:00:75:
04:9b:46:3b:30:56:72:47:cc:07:45:8f:07:f0:d9:fc:8f:d8:
9c:f5:b2:47:92:f8:44:20:6e:20:96:3f:50:9b:ef:27:ad:bc:
a2:26:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:01 2025 by rpki-client