Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
File: A1C3E87AA5B011EE80D06016C4F9AE02.roa (raw, json)
Hash identifier: dQyMIYm5OZQBTmRtl3m4HuvQOQSx93NY4BXSVd52BXE=
Subject key identifier: F6:83:FD:6F:8C:E0:4F:7B:F5:70:DB:94:0D:65:D8:93:31:54:E2:64
Certificate issuer: /CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
Certificate serial: 06DD
Authority key identifier: ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
Signing time: Tue 28 Jan 2025 21:50:59 +0000
ROA not before: Tue 28 Jan 2025 21:50:59 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134204
IP address blocks: 103.159.254.0/24 maxlen: 24
103.159.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135EE5
Validity
Not Before: Jan 28 21:50:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67995143-8279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:0e:cb:2d:d2:fc:4e:02:1c:16:83:19:8b:
87:a8:93:d3:8e:12:60:c0:8b:c2:1d:b0:84:49:94:
9e:59:5b:37:46:ce:ac:45:ea:46:dd:f5:c9:f5:ed:
0e:78:5e:7d:b0:08:71:e6:90:1a:f9:37:c8:51:c5:
a4:ee:94:37:b7:c9:e1:4d:fa:c9:b7:48:b5:6f:a4:
47:e6:45:f7:26:d6:db:4f:6d:0c:3f:98:e9:ec:df:
ca:b3:dc:67:a6:bc:b5:71:bd:70:5f:74:54:2e:0f:
c1:0a:bb:3f:b6:70:cc:f6:9a:56:57:59:16:dc:41:
99:3e:05:66:b1:6d:4b:25:c7:d0:05:d8:85:a0:67:
44:4d:a5:8b:1d:7f:c8:dc:47:4c:61:f6:a5:fa:9a:
a3:0b:f7:0b:43:c2:41:84:8c:0c:8f:4e:75:ac:37:
72:53:e7:77:61:7c:be:de:24:62:00:1e:19:97:a4:
ab:70:36:85:d6:2c:fc:6d:94:3b:40:f4:5f:ce:33:
09:7b:a1:5c:dd:44:5f:f4:93:cb:6b:77:e8:8a:72:
60:45:4b:d9:2a:98:0e:46:18:e9:41:bd:3a:fc:a3:
95:26:47:bc:53:a6:52:9d:5c:68:7e:19:3a:b0:e2:
e8:4a:4e:06:3d:05:36:bb:b9:04:cc:6e:c9:b9:a5:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:FD:6F:8C:E0:4F:7B:F5:70:DB:94:0D:65:D8:93:31:54:E2:64
X509v3 Authority Key Identifier:
keyid:ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/A1C3E87AA5B011EE80D06016C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:37:18:1b:e6:32:fa:cd:4f:30:3a:cd:9c:47:e7:97:11:88:
03:25:6f:f6:cd:5a:cc:15:76:50:0d:40:88:3f:c9:90:bd:da:
70:af:23:e8:86:87:52:4c:ce:3c:4c:55:41:09:75:9f:d6:f6:
ed:09:65:1d:e0:cc:c2:02:52:3a:4d:a5:17:d4:a4:63:84:ab:
7c:33:a0:d4:94:f4:a4:a0:5b:a4:87:05:09:65:c8:63:c6:94:
c3:b1:52:9f:fa:c0:38:9c:26:a4:9a:1b:db:64:e0:6c:7a:ea:
d1:da:18:bd:d1:68:99:82:4e:94:86:70:2d:59:e4:b9:a3:bd:
c1:64:5b:8f:63:c9:31:18:0d:9e:67:9e:eb:67:90:ff:4d:5b:
9a:7f:f9:c0:c7:0f:2d:70:30:e2:63:6f:ef:3e:94:91:91:73:
ac:75:e3:5c:32:db:12:b8:35:1b:eb:9f:53:e2:f4:b7:8a:1c:
b7:6f:3a:a9:b7:25:d9:bf:8b:ec:2a:e1:ee:5e:0e:39:69:f9:
c0:00:79:44:19:af:98:db:ed:06:21:fe:34:2c:46:07:e8:0e:
f5:5c:fd:45:76:51:55:31:ef:f1:1c:f4:e0:8e:cc:27:22:9a:
7d:ae:02:76:bd:f6:07:76:db:ee:c3:42:2f:74:ac:9c:1b:af:
bd:41:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:02:00 2025 by rpki-client