Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/D77FA53AB01D11EFB299352EC4F9AE02.roa
File: D77FA53AB01D11EFB299352EC4F9AE02.roa (raw, json)
Hash identifier: 4eEXJC4TtO3yoI9oMhK5BKgEqI0bbNyeYSuDBkBIfCM=
Subject key identifier: 93:B4:76:C3:9F:92:F9:28:78:7C:3D:4E:7C:B0:3E:3F:2C:08:94:3D
Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial: 013A
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/D77FA53AB01D11EFB299352EC4F9AE02.roa
Signing time: Sun 01 Dec 2024 19:52:49 +0000
ROA not before: Sun 01 Dec 2024 19:52:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138501
IP address blocks: 103.121.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B0D
Validity
Not Before: Dec 1 19:52:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674cbe91-d5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:7b:35:47:96:7c:ff:60:fc:21:4b:46:1c:
3c:34:ff:b0:05:a3:e7:29:e8:a8:0b:a4:18:6c:2a:
60:3b:90:55:f2:39:8d:60:b3:d3:96:31:ef:97:bb:
c5:49:97:b7:b1:c5:08:d3:9a:09:c3:f9:3b:b1:9c:
00:33:19:13:42:6e:b4:ab:01:3f:4d:b8:e9:d5:8e:
49:ac:91:51:a6:4c:28:a7:85:d9:7a:2e:bb:4b:ca:
04:c1:9d:6f:05:8e:16:a8:17:75:84:fe:79:02:5a:
e2:5d:1c:4e:a8:ed:0e:f1:12:da:29:49:ff:ae:00:
4a:55:a5:0e:df:a0:47:5e:c8:93:a6:80:88:c0:7b:
e8:cd:3f:9a:9b:d9:83:30:83:60:b7:65:69:32:79:
cf:01:c7:31:7f:98:ca:87:e8:ca:2a:64:da:da:3a:
3e:a0:77:64:49:2a:a6:98:23:13:3e:c9:45:59:0b:
39:cb:73:fd:4a:13:6e:04:09:c8:58:c3:6f:e7:31:
21:1a:de:fe:90:85:84:5d:54:cc:c5:0d:7d:03:21:
16:1f:68:80:9a:bb:4c:0f:9d:e3:b6:af:3e:04:5c:
78:be:fd:38:d2:e6:0d:d5:1a:25:8a:97:38:47:f8:
e5:1a:f9:aa:a3:ca:01:89:f7:0d:d0:9e:71:cf:77:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:76:C3:9F:92:F9:28:78:7C:3D:4E:7C:B0:3E:3F:2C:08:94:3D
X509v3 Authority Key Identifier:
keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/D77FA53AB01D11EFB299352EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.185.0/24
Signature Algorithm: sha256WithRSAEncryption
74:96:09:95:98:8e:15:0d:f6:0c:66:07:39:90:b9:c8:0a:69:
46:b4:2f:67:c9:51:9f:5e:3d:73:e1:2e:5b:e4:c9:37:71:50:
bc:2b:82:11:1c:d3:dd:ad:51:d9:80:aa:24:6d:93:ae:ab:f2:
28:45:d4:ed:c8:74:0e:8e:93:05:4a:b0:5d:78:97:8e:40:c0:
d5:de:4e:b7:ca:c3:47:9b:68:f9:73:73:8b:2e:be:94:9b:89:
43:8b:e1:eb:44:02:80:d1:30:c2:b1:98:ca:ad:a2:59:31:7f:
1d:52:bf:c4:17:b4:f3:2a:f1:bf:48:c3:a7:27:03:54:57:ae:
a4:a8:61:16:eb:de:7a:f0:26:f7:87:3a:fb:8f:18:c2:63:2b:
b4:8d:bd:70:a7:66:a8:c5:3c:3d:ea:1e:dd:4d:cb:ab:10:b5:
67:30:af:11:14:3f:7a:6b:dc:3a:63:6c:81:af:96:d1:1a:38:
58:19:7b:9e:33:a5:a3:08:b2:7c:b3:0b:20:d4:09:43:65:2a:
7a:aa:3f:fd:d5:23:94:15:9f:cf:c7:e9:48:f3:32:a7:8d:cc:
62:f1:dd:c9:67:54:db:a6:2f:ed:e3:06:21:f1:1d:e0:16:6d:
4d:3b:d9:71:83:02:06:13:98:8c:e9:a0:ab:f4:01:0e:74:19:
fd:d7:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:15 2025 by rpki-client