Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa
File: 93E364468FC111EFA7695485C4F9AE02.roa (raw, json)
Hash identifier: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=
Subject key identifier: AE:62:50:09:C2:69:55:88:E6:75:FF:7C:A5:C5:C2:02:36:E5:8C:E9
Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial: 05C7
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa
Signing time: Fri 06 Dec 2024 23:01:25 +0000
ROA not before: Fri 06 Dec 2024 23:01:25 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137048
IP address blocks: 103.159.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B5E
Validity
Not Before: Dec 6 23:01:25 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67538244-2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:8c:d1:38:71:48:2f:44:fe:2d:4a:27:96:
2b:0f:92:a5:ab:e0:f6:ca:81:1f:f3:a7:1a:f1:5a:
4c:60:0c:5d:93:b2:8a:cb:3a:1f:90:a1:bf:a0:de:
c4:1f:b2:4f:66:00:4b:9c:ea:1d:71:1d:de:87:c5:
42:e5:5a:4c:4f:f5:f6:42:ee:82:9f:89:ac:c0:fa:
61:c3:99:83:64:53:76:39:03:a1:7d:2a:91:dc:3d:
b9:45:ae:7c:bc:f0:65:8b:66:e6:5f:d2:b3:6e:ab:
bb:c3:9d:cb:3b:57:fa:2b:59:88:3b:e0:28:2f:98:
23:4c:36:19:32:71:9e:c9:b6:89:be:59:60:9e:f6:
45:54:21:77:fd:67:99:1d:5a:71:9a:5c:59:65:03:
e3:2c:ab:ae:ea:61:3c:ac:e7:70:79:a9:c0:19:91:
fd:93:f2:53:bf:65:73:5c:04:ce:ea:c5:d4:58:67:
d4:bb:36:9e:23:89:d9:af:2c:03:6b:2c:83:08:ae:
c7:04:43:f3:28:fc:26:bf:06:80:82:d1:c4:ff:92:
34:4e:96:d3:b8:dc:5d:39:36:23:93:c6:bc:98:98:
ab:66:4c:df:ab:04:69:2e:80:af:83:28:39:6a:76:
0a:95:e0:4a:bd:ca:83:6a:f9:f6:c3:98:34:40:09:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:50:09:C2:69:55:88:E6:75:FF:7C:A5:C5:C2:02:36:E5:8C:E9
X509v3 Authority Key Identifier:
keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/93E364468FC111EFA7695485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.5.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f4:b7:20:9b:5f:93:23:50:4a:be:d5:1d:16:f1:54:3e:b5:
f2:1e:e7:17:94:96:c6:5d:ff:66:25:86:4d:1a:36:9d:61:29:
63:93:be:dd:55:9b:15:42:28:b0:74:72:6e:fe:7d:00:c6:43:
e9:fe:4c:49:d6:ab:a4:23:ef:80:c9:4a:fa:c0:b3:97:02:41:
f7:6d:ad:08:52:c9:1f:7a:f3:e9:bc:10:31:94:b6:3e:05:04:
f5:19:c1:b3:4f:eb:fa:5e:32:9e:6f:64:fd:f5:de:70:49:f0:
d2:12:e6:92:c2:c1:44:7f:8f:4e:e4:bd:9a:e2:8e:41:90:11:
fd:3b:1e:d1:07:8a:77:d7:8a:82:4b:2d:b2:43:2e:e8:2d:1a:
80:0a:a7:8b:dc:e5:ae:b3:c7:e6:4e:9c:0a:ec:e1:bc:19:b2:
0a:ea:19:cf:ba:01:9c:47:65:6d:20:46:77:2a:74:f2:9e:24:
2b:bc:72:fc:86:70:a0:36:8d:8e:01:95:52:90:d4:b1:0f:c4:
ed:73:55:0c:00:59:c4:43:68:aa:f3:46:b4:7d:cb:8d:f3:c8:
4c:ff:8a:3b:9b:96:0e:ed:d0:13:25:b2:c6:2e:2d:bf:12:4f:
b3:67:44:4a:0b:43:62:01:34:4d:16:37:03:54:d3:c6:54:c3:
7b:18:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:49 2025 by rpki-client