Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2E03458EA14211EDA566785DC4F9AE02.roa
File: 2E03458EA14211EDA566785DC4F9AE02.roa (raw, json)
Hash identifier: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=
Subject key identifier: D5:5C:BD:E8:D4:61:9B:C5:B6:23:99:40:48:57:8E:97:37:6C:C7:33
Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial: 019C
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2E03458EA14211EDA566785DC4F9AE02.roa
Signing time: Wed 29 Jan 2025 02:15:40 +0000
ROA not before: Wed 29 Jan 2025 02:15:40 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 149419
IP address blocks: 103.59.216.0/24 maxlen: 24
103.59.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121071
Validity
Not Before: Jan 29 02:15:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67998f4c-7dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:c2:1a:b6:0e:a6:14:b3:79:58:e2:3a:9a:
4e:f9:c4:19:60:ee:ee:60:30:88:ae:d0:58:5d:8b:
86:d4:87:8a:44:b3:4c:b1:94:31:b8:af:ce:37:e2:
7d:93:94:95:e8:ef:84:45:66:e9:5e:df:d9:1e:2a:
61:73:b2:9a:ef:e0:0f:34:07:73:84:7a:4d:f8:a6:
e7:79:d3:f8:31:5b:f5:fe:3f:cc:7f:99:d7:00:08:
ba:f2:3b:41:89:08:8b:a4:9f:b9:56:13:84:c3:a4:
dc:ed:61:0f:58:d0:2f:32:aa:bf:10:ca:24:b6:19:
5d:45:b2:57:cc:47:48:17:98:b3:8e:93:d0:41:fd:
c5:ee:1a:df:01:f0:01:c9:8d:79:c7:52:92:28:51:
d0:2a:e6:b5:cb:14:a2:54:db:7c:8b:47:dd:9a:f2:
60:08:e5:83:ec:3c:77:05:cc:f5:00:fc:6f:78:32:
cd:e7:f9:ed:19:c2:7b:73:9f:75:6b:df:c2:b0:a5:
d9:4a:b3:b8:7f:e3:84:b4:b3:6c:f3:d7:67:71:35:
0e:35:9e:46:28:a6:30:ee:83:0b:6a:5e:f7:13:d1:
fa:e6:a9:9d:e8:1d:a0:df:60:61:f0:27:ae:22:94:
df:07:76:f9:4a:b9:f0:ff:fe:c6:4a:d7:38:a5:06:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:BD:E8:D4:61:9B:C5:B6:23:99:40:48:57:8E:97:37:6C:C7:33
X509v3 Authority Key Identifier:
keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2E03458EA14211EDA566785DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.216.0/23
Signature Algorithm: sha256WithRSAEncryption
49:8a:51:4b:f4:d3:a6:68:07:f2:37:b0:66:bf:cf:a3:b1:93:
40:b4:62:38:22:8b:49:96:e9:7f:2f:4c:eb:29:f1:95:bb:bb:
17:20:9d:72:ca:59:98:fd:9a:5b:f8:e6:57:76:63:55:00:57:
d0:c1:dd:c0:bb:6b:19:66:87:8f:5c:20:68:4b:6c:43:d7:33:
9b:13:6f:a2:c0:41:18:43:d1:58:02:dd:a2:28:11:43:4d:23:
41:67:51:7d:cf:08:a7:aa:d5:40:50:8f:a8:af:f6:ad:9d:09:
a8:9e:a9:f3:1a:f0:9e:b0:8d:fa:b0:51:89:73:80:6a:80:f1:
32:24:d0:83:75:7c:91:72:1f:83:68:d5:a4:f1:9f:d1:91:a2:
a9:a0:60:a8:b2:e9:53:de:c7:85:56:e4:86:19:7b:b6:3a:dd:
49:2e:40:9d:c1:d4:24:b1:20:d9:cf:9a:8e:24:8c:bc:27:34:
ac:7d:38:0f:47:2a:8d:f9:fb:2d:5e:ae:38:26:06:28:ad:91:
88:6f:e8:0c:2c:27:a0:c7:cf:36:16:d4:95:ca:11:1f:7a:69:
3d:91:a6:d8:0a:8b:31:b7:af:22:c8:42:a2:7d:70:12:45:c5:
47:02:ae:69:c0:ca:15:d8:c2:4f:f9:f1:15:16:8a:5b:28:31:
7d:d6:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:12 2025 by rpki-client