Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa
File: 8415F4AA928511EE8AE43D75C4F9AE02.roa (raw, json)
Hash identifier: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=
Subject key identifier: 25:3A:94:78:9A:79:66:DD:8E:BE:D9:B9:73:38:DD:C7:1B:E0:DB:CD
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: CB
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa
Signing time: Fri 13 Dec 2024 04:08:53 +0000
ROA not before: Fri 13 Dec 2024 04:08:53 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138469
IP address blocks: 103.126.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109
Validity
Not Before: Dec 13 04:08:53 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675bb354-7ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:ef:87:fc:15:11:4b:70:5f:f1:a0:be:87:
bc:3f:6a:1a:00:47:07:0c:11:b1:c6:c9:a6:45:2a:
26:fb:2b:51:6b:de:ff:71:b4:9b:57:7e:1c:b4:a9:
c0:ad:b0:1f:7b:fd:11:6c:99:e3:e9:83:53:cc:5f:
db:b5:ac:fa:f6:42:b3:ab:e7:a4:39:11:31:a8:76:
87:69:90:37:43:0e:54:e0:e3:35:87:3f:61:c5:a2:
03:fa:7e:9c:ae:9a:26:8e:73:ae:ee:08:a2:f4:91:
41:bf:d0:9d:f7:29:64:b4:93:10:0b:ad:89:6a:60:
f1:c6:c6:4d:ab:19:4e:1a:ba:84:be:19:68:e9:f4:
d6:44:b3:5a:c2:ee:03:ba:e2:56:d2:45:a0:0d:80:
7e:e8:2c:7c:7b:2f:c5:87:8a:4b:a1:ce:9e:1b:60:
1a:5f:a6:5c:c4:bc:d6:a0:ea:f7:de:e7:dd:4f:2a:
68:0a:40:4e:bd:01:7d:b6:24:88:44:b4:43:b3:ee:
d3:41:f7:6f:fa:cc:2c:46:3c:7d:b4:62:e2:f1:fa:
6b:fb:7b:b5:a0:1c:96:a6:df:1b:17:c9:c7:16:b2:
57:47:0c:c5:c0:57:99:28:69:fa:15:34:0e:20:5a:
79:ec:0b:30:a3:d2:3f:35:49:e7:21:6a:12:31:32:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:94:78:9A:79:66:DD:8E:BE:D9:B9:73:38:DD:C7:1B:E0:DB:CD
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/8415F4AA928511EE8AE43D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:fa:09:40:1a:4a:02:42:cc:b8:84:e3:b0:c7:83:ff:e8:70:
fa:01:23:03:81:99:00:40:5b:af:1d:14:51:e7:d7:4b:7d:a3:
c1:00:03:06:ba:6d:02:cc:8a:41:a4:03:0d:c4:6e:8c:32:5c:
06:bf:dd:b2:24:88:82:88:87:56:b1:92:8f:9f:a4:5a:47:d3:
9a:44:17:e3:8a:07:ed:65:79:32:be:c1:49:3b:df:a6:b0:00:
b9:57:18:00:b6:b8:6d:cc:9d:9d:b8:84:19:92:f7:95:9f:ea:
b2:77:05:d8:0a:94:29:f5:1e:21:b4:a6:8c:d1:0d:46:e8:8a:
44:5c:f4:c0:78:30:8b:09:f8:76:58:b0:c7:7c:d1:c6:fb:19:
6f:11:7c:f1:b2:b0:0a:c2:0b:64:ea:64:4b:2a:27:fc:f0:7f:
ef:60:e0:cf:07:04:25:14:cf:57:26:d3:7c:4a:0a:10:6b:18:
54:73:99:8b:19:dc:dc:af:68:58:11:49:af:e9:e7:58:1a:97:
7a:b0:af:c5:35:9c:97:43:82:29:b9:8e:96:28:96:08:1c:17:
be:1c:5f:ed:78:89:aa:b1:80:60:f3:9c:e5:9f:c4:e3:73:00:
c7:0b:1a:2e:40:f8:99:84:e9:5c:c4:b1:35:08:06:23:f8:7e:
13:d4:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:21 2025 by rpki-client