Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
File: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (raw, json)
Hash identifier: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=
Subject key identifier: 63:DD:2C:18:22:CF:6B:31:5A:F4:35:E7:B9:91:E3:5B:B7:80:8E:62
Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Certificate serial: 0100
Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
Signing time: Mon 23 Dec 2024 03:47:43 +0000
ROA not before: Mon 23 Dec 2024 03:47:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 136759
IP address blocks: 103.36.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121995
Validity
Not Before: Dec 23 03:47:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6768dd5f-55b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:e4:96:36:c8:16:0f:a9:51:47:38:14:92:
40:29:c0:b0:c5:6a:18:23:6f:df:1d:35:c7:70:6a:
e9:03:83:67:36:87:72:b6:ab:cd:92:c0:af:2e:ff:
23:58:61:ab:71:ab:ce:0c:c8:8e:3c:aa:3f:b6:1f:
76:0d:f6:ec:3d:1f:02:9d:3a:79:8b:e5:ab:26:7f:
07:42:66:df:b1:5d:08:79:dc:23:a2:84:6c:cf:b4:
30:73:b8:60:91:c4:1a:f2:b0:9e:11:08:6a:66:87:
5a:48:22:f8:17:48:5e:1e:26:79:e5:d2:ae:21:b7:
6c:87:d3:67:d6:c9:be:07:69:86:3e:64:ea:e8:b0:
8e:71:c0:d9:ed:cf:1f:fc:be:3e:3d:57:ef:1e:8d:
9e:3c:c8:45:98:b2:ab:a2:f5:e5:2c:0e:fd:27:01:
8b:85:0a:61:e5:6a:c3:65:75:dc:c7:e4:a2:55:33:
98:48:56:d4:ad:94:b3:c5:13:aa:72:45:0d:f0:7f:
2e:a1:9c:96:03:c2:e5:06:5d:c5:72:8b:b4:2c:4f:
28:64:9e:a2:37:06:46:78:b7:01:c0:31:03:db:e4:
d5:1e:0c:f7:86:89:5c:d2:cb:22:9c:67:ad:ea:3e:
94:46:b1:24:4f:bc:22:09:09:12:15:cc:49:c5:81:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:2C:18:22:CF:6B:31:5A:F4:35:E7:B9:91:E3:5B:B7:80:8E:62
X509v3 Authority Key Identifier:
keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.255.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2e:eb:cc:17:5e:46:fc:86:f8:15:f1:5d:1a:f3:cb:d7:ed:
4c:d1:bd:a8:18:c0:a6:3d:37:46:f0:e2:b0:9e:95:49:12:22:
ae:dd:cd:93:a0:77:d0:1f:79:31:65:ee:d9:9e:9b:b0:1e:af:
f9:8c:d1:ca:62:d0:25:a0:ee:22:24:f8:f7:b7:e9:66:e1:6a:
e0:a3:5d:96:d9:9f:ea:00:1a:22:22:5c:9f:b7:ae:a0:db:75:
ea:eb:5b:d0:f8:ac:e2:d5:c6:08:81:f2:7d:cb:19:50:de:a5:
ac:23:8a:d6:2d:b0:62:13:23:ae:2c:98:d8:a7:1c:02:76:4a:
bc:c8:88:67:4b:e2:bf:d3:4a:c0:e3:fb:5c:46:fc:2f:36:c2:
63:9e:ed:6b:42:c4:0a:ef:02:c7:fe:a8:04:d5:45:33:a1:a3:
37:2b:44:c1:ed:d9:1f:6a:09:54:d5:35:55:ff:71:1a:57:8e:
5d:bf:a4:f1:49:93:13:2a:57:f5:5f:d6:05:42:08:f8:1d:97:
46:99:38:ae:29:07:e4:38:a2:36:47:bb:1e:4e:43:a3:5c:80:
2c:51:1f:7e:a7:77:65:f7:fc:a5:48:b4:ec:27:62:3f:da:69:
11:26:97:3e:7a:11:3f:be:bb:c4:9d:bb:2f:21:5e:06:d1:5a:
e8:a2:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:45 2025 by rpki-client