Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
File: 5C1E69E043E011ED96455A4BC4F9AE02.roa (raw, json)
Hash identifier: xHZ7/Ay2BLjPyLaYUPZt3dR4RHXQX55WueUgcbk/XTY=
Subject key identifier: F9:0E:8B:0D:CD:2D:83:C7:DD:6D:B7:E8:BD:87:2D:81:08:60:58:1A
Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial: 0730
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
Signing time: Sun 08 Dec 2024 21:20:20 +0000
ROA not before: Sun 08 Dec 2024 21:20:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 141234
IP address blocks: 103.156.244.0/24 maxlen: 24
103.156.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911807E
Validity
Not Before: Dec 8 21:20:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67560d93-1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:c6:03:42:b9:8d:0a:7c:9c:1c:1b:d9:34:
fa:25:5d:94:ad:00:d6:76:d7:a3:83:79:8f:2d:2e:
9c:7a:24:ee:c9:c8:6f:76:3f:70:4d:8c:6f:f4:a3:
7f:5d:31:7e:15:85:6c:36:28:97:b1:58:26:83:2d:
75:9c:0c:1c:28:18:05:c5:b6:b5:76:1f:18:38:f0:
c4:e5:bd:99:df:f0:2a:7c:b5:57:d9:b2:61:de:44:
a1:2e:81:d3:e0:04:e1:26:29:53:2c:4d:72:f2:6b:
4d:98:30:ce:36:db:eb:30:34:0a:8c:b7:61:06:3b:
f8:07:a5:1a:cd:4f:ba:aa:58:14:15:ca:50:2b:63:
b9:e2:41:87:a0:c7:c3:93:06:ca:94:ac:89:f7:d8:
08:0e:88:52:d1:a7:59:1a:e7:a4:68:27:a0:ef:c5:
8d:b9:18:4d:cb:c6:8d:5a:e4:dc:bf:eb:9e:e8:f5:
fe:8c:9a:25:94:94:73:82:95:08:19:d4:26:2f:17:
6c:90:f9:d9:35:0e:3f:2f:83:81:de:cd:84:9a:19:
7c:52:a3:c9:70:5d:85:e4:9d:9f:44:48:70:dc:65:
bf:6a:b9:f8:04:dd:03:29:d2:49:62:f6:17:c0:ec:
2a:1a:fd:c4:a8:c5:c7:95:1f:c3:3f:19:e6:98:fa:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:8B:0D:CD:2D:83:C7:DD:6D:B7:E8:BD:87:2D:81:08:60:58:1A
X509v3 Authority Key Identifier:
keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.244.0/23
Signature Algorithm: sha256WithRSAEncryption
98:47:8b:af:01:ff:fc:47:3e:60:10:5f:35:63:b2:b7:60:13:
f3:d6:99:cb:13:c4:c0:3a:61:4e:a9:75:b9:69:09:d8:6f:bb:
2f:0e:ae:f8:d4:cc:5d:d1:50:df:8e:58:09:33:38:a6:a8:0b:
87:63:11:66:e1:f2:1d:be:79:84:93:3e:c0:bb:3b:ee:2c:01:
42:6c:57:b7:d4:5e:20:2b:20:d7:e5:c1:77:f7:fb:f1:71:0b:
89:43:3a:d7:9f:95:26:d6:67:45:17:46:fe:21:ad:81:a0:17:
7e:39:41:63:28:34:7b:43:7c:94:a7:80:6f:bd:59:85:3d:3f:
8f:91:92:35:b7:6d:37:e9:2c:98:70:35:ea:49:a2:90:38:64:
95:a8:b3:10:fb:5b:a9:df:c1:38:9d:8b:32:36:30:e0:c4:1a:
ca:c8:9f:44:4a:c5:67:45:e1:52:bd:ed:e4:6f:a9:93:da:9f:
82:5a:ed:fa:cf:02:4d:cf:97:af:36:3e:a7:a1:82:5d:59:ea:
b0:9b:fa:17:63:13:64:82:76:55:44:e7:7b:da:4f:d0:a8:7b:
5b:40:12:f8:93:fd:7a:36:41:a5:3a:5a:0c:0b:82:c6:8c:70:
95:69:de:d1:e4:9c:8b:a1:84:2a:a6:08:b3:93:9d:a7:21:c3:
ba:09:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:28:00 2025 by rpki-client