Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
File: 702B683202E911F097290F2EC4F9AE02.roa (raw, json)
Hash identifier: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=
Subject key identifier: 80:4C:14:6A:B7:70:41:57:8D:31:46:05:D2:C4:BD:18:FD:28:ED:89
Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial: 0BDC
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
Signing time: Mon 17 Mar 2025 04:36:48 +0000
ROA not before: Mon 17 Mar 2025 04:36:48 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139823
IP address blocks: 103.145.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131579
Validity
Not Before: Mar 17 04:36:48 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d7a6e0-f67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:51:36:21:a8:49:c1:81:b2:97:43:d4:6f:
9a:78:cc:3d:5f:f0:b4:91:5c:7d:a9:60:9b:d0:a3:
37:56:a8:27:15:de:ad:1f:44:86:64:58:46:72:bc:
af:75:b1:92:41:e8:53:eb:8e:27:0c:17:4c:3e:38:
f5:fb:71:7c:1d:a3:b6:84:2a:9e:25:62:d6:18:b5:
fe:e2:77:f6:70:09:bf:7a:09:37:d5:13:7c:a9:ea:
21:40:77:06:5e:d7:23:0b:9d:b3:20:a2:0c:0d:5e:
b1:f9:67:b4:ec:28:67:1e:4f:4b:be:5f:73:75:c5:
f3:1c:00:39:95:cc:a0:2e:59:b1:22:6f:05:d5:5c:
80:dc:88:87:67:89:dc:36:15:6e:4e:7b:bb:e6:6a:
74:9b:c0:7b:4a:42:52:ab:83:81:f3:36:64:92:7e:
ee:84:14:d0:34:7a:3a:65:7e:c9:8c:f7:72:01:26:
a9:d2:c4:86:19:e2:54:13:d8:f0:ad:2f:01:aa:2b:
0b:6d:b9:ab:4c:09:a7:c5:38:2e:34:73:88:53:37:
9d:51:a3:9a:e0:cf:71:02:5e:a9:03:9e:8b:fc:b1:
00:b4:75:2e:7a:a5:25:14:dd:80:45:82:c4:e7:6e:
85:71:3b:ad:86:33:da:b2:d9:b0:4e:bb:5b:1c:f9:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:14:6A:B7:70:41:57:8D:31:46:05:D2:C4:BD:18:FD:28:ED:89
X509v3 Authority Key Identifier:
keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/702B683202E911F097290F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:74:90:e1:85:ef:ad:3e:c8:61:a7:f0:90:2b:39:1e:54:3d:
a4:25:f0:ad:57:19:bd:c1:20:06:89:15:ec:bc:ba:57:d4:60:
77:cb:39:e5:fd:1d:fb:a9:b3:bc:06:51:c9:35:52:03:ba:96:
5d:fd:59:e1:e4:c5:45:3c:f8:0b:6c:90:8a:99:03:56:68:00:
7f:da:9e:6d:b6:4b:91:7e:8f:45:0d:26:f8:d9:9f:64:1d:89:
db:d3:b2:5e:fd:0b:91:bb:4f:2b:88:f4:9b:dd:fd:3d:08:d4:
ed:5f:6e:ed:a9:66:9b:81:fc:87:be:97:10:d1:29:2a:7d:b4:
38:b8:45:30:6d:ec:71:ad:04:79:6d:33:fc:83:1d:7c:16:b1:
15:a5:5c:af:84:12:1a:ca:e1:fd:30:5f:33:71:b2:09:18:42:
e2:cb:f1:88:f9:3f:64:d8:46:4c:f4:a5:51:e6:f9:7b:f0:fb:
b9:fb:d8:d1:b2:e9:d7:c1:a4:54:99:60:d5:00:f5:94:af:6c:
2f:fe:0f:8a:8b:68:25:b7:12:50:a4:c2:e0:65:ca:79:67:d1:
ca:5b:51:56:d0:14:25:c2:b7:dd:6a:bc:0e:1c:36:54:40:4f:
f1:28:62:6e:14:b2:c5:1c:a1:54:bb:e0:ef:dc:80:4a:f5:c2:
66:74:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:19 2025 by rpki-client