Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
File: E1201A0422D611EFAE700044C4F9AE02.roa (raw, json)
Hash identifier: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=
Subject key identifier: 4B:71:FE:25:48:31:45:41:9D:C8:11:17:EC:3E:0E:43:2D:F1:17:36
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 05A6
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
Signing time: Wed 05 Jun 2024 00:59:37 +0000
ROA not before: Wed 05 Jun 2024 00:59:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 103.15.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D
Validity
Not Before: Jun 5 00:59:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665fb878-5f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:13:69:60:27:fb:82:19:40:ea:af:71:12:
8d:f2:6b:22:19:80:63:b3:16:e5:55:b4:3b:3a:a4:
f7:d1:d2:a6:76:1f:87:fe:91:27:dc:23:53:19:3e:
02:80:aa:7d:46:8a:39:43:1e:a6:2c:49:65:46:d6:
17:4a:a4:b7:56:09:f1:be:90:75:15:4f:ef:97:3c:
61:da:5a:9f:dc:0c:e7:91:9e:ce:ef:2f:1f:41:7c:
c4:af:a4:3c:42:fa:f2:c7:43:7a:4c:51:41:26:c2:
4d:93:52:94:4f:6b:4a:1a:a1:d3:48:0f:2f:5c:f1:
10:11:2a:bf:36:47:c2:ec:72:32:1e:82:f6:5f:da:
ab:dc:4c:e6:c0:b2:15:dc:09:eb:39:b0:1c:46:fe:
0e:6b:f5:c1:d3:cd:c1:d0:d7:d7:01:5a:2e:d7:91:
f4:56:d2:1c:52:74:af:b2:d5:70:0c:70:1f:b5:91:
73:23:74:c8:ea:ab:e6:2a:c3:47:45:64:7b:8d:9c:
a4:af:3d:cc:a3:bf:c4:22:01:00:cd:17:50:58:02:
79:f5:9a:ed:dd:bc:21:54:bf:3b:6f:82:c9:94:9c:
24:99:b0:55:f0:47:5f:f1:23:bc:6e:52:00:f5:b3:
91:98:48:eb:eb:d5:f2:36:0f:fd:24:5a:cc:b0:bc:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:FE:25:48:31:45:41:9D:C8:11:17:EC:3E:0E:43:2D:F1:17:36
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/E1201A0422D611EFAE700044C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a0:c6:b1:e3:d0:40:6f:d9:a4:10:f9:72:16:00:35:77:f1:
a2:4e:16:58:53:f8:84:e1:36:19:e1:44:93:df:25:67:7e:3c:
45:8a:bb:a8:f5:32:4d:f6:f0:c1:93:fe:19:7f:b5:11:20:56:
5a:b3:20:3a:2f:e5:35:b3:c1:fe:4a:9f:5f:e5:72:f9:ff:98:
67:24:74:2a:8f:6e:6b:d4:a8:ab:fc:d7:14:bc:f4:a0:18:3c:
11:b4:83:62:d6:a3:89:51:04:fd:34:ac:c1:bd:ef:23:d2:63:
1b:9e:bf:cf:79:3c:b6:e5:42:1b:dd:6d:02:de:1e:80:af:e7:
00:64:37:68:a7:18:bb:42:6e:ad:a3:7a:6a:5f:ed:ec:9c:58:
ec:25:27:ba:2d:11:27:76:e7:dd:b5:c9:5d:29:ae:3b:09:6f:
55:0c:5e:26:35:15:a8:f8:a8:24:25:b2:f7:da:e1:f5:06:98:
44:77:81:cd:e9:87:d1:5e:c1:0d:14:fc:6c:61:c5:a5:2d:b9:
c9:26:61:21:54:e0:1b:ef:2b:87:e4:a0:d5:c2:75:ff:4e:91:
ec:48:65:ff:0e:c7:1d:be:a5:63:db:31:37:bd:b3:a0:7c:f6:
54:03:bc:7a:bf:3c:d8:21:ff:d4:7a:13:65:64:08:f2:32:2d:
5c:c2:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:28 2025 by rpki-client