Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
File: 7C76E4F6928611EE9B72027FC4F9AE02.roa (raw, json)
Hash identifier: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=
Subject key identifier: 55:99:24:89:C4:3D:5F:E0:D3:70:B4:30:A6:07:56:FE:94:53:BE:B3
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: CC
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
Signing time: Fri 13 Dec 2024 04:08:53 +0000
ROA not before: Fri 13 Dec 2024 04:08:53 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 7474
IP address blocks: 103.126.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109
Validity
Not Before: Dec 13 04:08:53 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675bb355-147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:97:36:ac:5a:03:2d:27:69:b1:81:65:96:
d9:0c:02:84:b0:99:93:ba:a6:9e:3a:f6:42:a2:64:
9c:ec:a0:43:9a:3a:ee:06:06:ef:d1:ef:60:ff:bf:
78:f1:ca:d4:31:50:dd:6f:b2:25:eb:22:a0:95:be:
1e:41:fb:6a:11:98:a5:56:16:05:5f:2c:36:35:64:
ee:1a:52:6b:7b:f7:81:07:74:d2:36:7b:b8:7c:e7:
16:74:5e:e4:8c:23:0e:ea:ba:b1:44:3d:1a:70:7f:
b3:0e:05:d9:6b:21:2a:e0:cd:08:5a:92:61:89:30:
20:a5:50:33:8c:16:41:59:8d:a7:ce:1a:ec:1a:82:
bc:09:53:d9:78:55:39:1b:d0:e9:93:58:8c:71:c6:
5f:bc:37:30:b0:5b:ad:18:0c:f6:4d:25:e1:a5:97:
79:6d:42:f6:31:3b:10:8b:37:c8:0f:7c:25:a1:0a:
99:87:ec:54:33:bf:e1:0c:7c:bb:79:d5:aa:1a:a1:
0d:b8:9c:b5:2b:d6:49:0d:af:ba:51:a7:bb:a9:a9:
b0:b2:74:67:81:7f:a3:4f:b1:3c:4f:a3:45:76:93:
01:68:45:03:72:43:7d:97:e7:26:a1:34:59:5a:15:
8f:5a:12:42:13:68:6f:61:1e:a2:ab:a5:c8:f6:7d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:24:89:C4:3D:5F:E0:D3:70:B4:30:A6:07:56:FE:94:53:BE:B3
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7C76E4F6928611EE9B72027FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.25.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:02:65:8f:3f:2e:f1:65:04:a9:86:c9:4b:78:30:ee:36:
30:bf:f8:d7:09:c0:46:88:8e:9f:de:85:3f:75:21:ef:f0:66:
37:2a:5d:e6:b3:af:52:18:20:d1:5a:ba:2a:8b:90:33:31:52:
01:d2:ef:a1:f7:c0:61:34:0b:65:e9:c8:b7:f1:9c:a2:60:ea:
c6:02:a8:ec:84:9a:fe:f1:41:62:ac:fc:e6:a8:bd:9e:26:c5:
f9:1a:d2:18:3b:b4:13:ec:b2:fd:bb:42:54:d0:f4:a6:59:e7:
a5:53:59:5e:3e:51:92:88:7b:00:02:88:74:6c:f7:68:00:92:
61:6a:b8:3d:ee:aa:61:b2:43:c9:7d:fc:f5:6a:89:32:05:14:
e0:96:8c:7c:65:01:b9:fb:e2:0d:d9:6b:0b:58:1f:6e:cd:8b:
dc:39:fc:26:55:fc:20:ce:e2:72:fd:09:d3:f1:ca:56:9e:ff:
ec:26:d3:1d:63:2b:00:54:bf:0a:3b:33:9a:c5:3d:ca:38:67:
64:3d:37:b8:e7:9e:88:98:96:04:f8:28:d1:db:6a:89:90:c5:
eb:e9:ed:8a:a0:ee:69:0a:6c:23:3e:90:1e:3b:ec:f7:88:86:
46:3d:68:ce:58:28:12:76:de:6a:a2:09:7a:5a:00:76:30:25:
61:ed:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:48:03 2025 by rpki-client