Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
File: BD63D19A650D11EA8FAFD931C4F9AE02.roa (raw, json)
Hash identifier: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=
Subject key identifier: EE:86:99:47:90:02:EB:18:E1:6D:8B:8E:CE:36:A7:3F:BD:78:95:8C
Certificate issuer: /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial: 0A14
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
Signing time: Tue 31 Dec 2024 19:58:19 +0000
ROA not before: Tue 31 Dec 2024 19:58:19 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139845
IP address blocks: 103.146.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2D5
Validity
Not Before: Dec 31 19:58:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67744cda-caae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:18:96:51:0c:63:7f:b6:3a:49:b4:c4:f2:
ec:d1:00:56:39:14:ef:0a:13:c9:68:36:b4:94:28:
55:cc:d6:e6:aa:15:3f:ac:b0:03:46:ab:ef:21:12:
f6:11:e3:ac:da:90:c4:e2:7e:f5:1d:ae:e9:3e:e6:
86:b4:fd:9c:52:b4:ec:60:a2:9a:df:c1:02:0a:d5:
d4:0a:25:da:98:7c:e7:db:a9:0e:6e:52:27:e6:d3:
98:c9:cb:b5:a1:ee:a9:65:82:a8:ed:94:18:e4:35:
10:e7:26:12:ce:a1:fe:2a:9a:fd:be:3b:2b:37:92:
81:5e:d0:d8:13:9f:07:7d:c8:21:e2:26:76:3c:13:
31:29:16:6b:86:4d:b3:27:cf:58:d5:02:cd:0a:42:
79:4b:02:87:0d:ca:e0:05:bb:e0:97:fd:a4:6d:fc:
a7:01:01:f6:76:26:92:a8:0e:77:d1:6c:1b:70:15:
31:b5:05:3c:cc:23:7b:88:5e:e8:d7:84:3f:e8:22:
3a:03:d2:c5:58:58:ba:ab:f6:b4:cf:e1:89:0f:c8:
dd:67:12:1a:a7:d4:40:20:42:1c:52:96:0d:7e:cd:
bc:2d:9b:1c:69:26:6a:b1:2e:c7:c5:9f:d8:b8:b0:
91:33:05:cc:44:08:66:f9:ad:7f:88:a1:8a:a8:87:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:99:47:90:02:EB:18:E1:6D:8B:8E:CE:36:A7:3F:BD:78:95:8C
X509v3 Authority Key Identifier:
keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.25.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e6:de:12:c5:5c:2d:00:72:45:04:bd:7d:33:a4:d2:89:53:
ae:89:4f:fb:b4:3b:f1:34:77:ce:b0:00:be:d6:24:97:31:af:
a7:1d:0e:45:13:04:be:e5:2a:d3:5b:9b:c8:88:16:2f:fd:e3:
b8:5e:e7:f7:2d:97:0b:9c:7c:35:66:9f:05:1d:d8:e8:86:91:
cb:a6:ed:84:1b:f5:ba:f5:ea:fb:62:5c:79:a5:c9:c7:ee:e3:
80:34:89:6e:66:35:d6:48:52:62:c0:b6:84:15:aa:2f:79:bd:
92:f9:ac:3b:d6:47:75:da:f4:2d:25:47:ca:c4:0b:e2:8a:ed:
bf:54:da:b5:6e:81:08:8a:b0:59:5d:b8:f7:a2:cb:4c:c4:17:
8d:bc:21:1a:68:ca:fa:78:82:4c:55:96:99:3a:8d:62:c8:8b:
a7:1f:cc:6b:39:80:9e:fa:e2:2f:8d:c9:40:9a:6c:89:cb:01:
c9:5f:a3:0a:1e:b5:e3:31:61:3c:64:2d:2a:49:73:5b:43:dc:
82:3d:04:7e:ec:69:2c:a7:24:9e:72:4c:ee:61:52:36:0e:9c:
a2:0c:a2:36:04:27:96:f6:e6:52:68:83:5b:c9:fe:9a:84:14:
90:e9:3d:e1:9e:ea:69:df:92:6f:3b:7b:23:a4:16:8d:68:fd:
dc:6a:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:32 2025 by rpki-client