Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
File: F6C5480A7C1011EF97676539C4F9AE02.roa (raw, json)
Hash identifier: G5E0ld16/NxVRFhbaeBuIdJHmsDoeWhuRW6eAAixqEc=
Subject key identifier: 54:5D:23:09:BB:A5:37:61:05:76:6E:90:D9:7C:83:3D:CC:1B:AA:01
Certificate issuer: /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial: 071D
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
Signing time: Thu 26 Sep 2024 14:09:37 +0000
ROA not before: Thu 26 Sep 2024 14:09:37 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149994
IP address blocks: 103.139.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137242
Validity
Not Before: Sep 26 14:09:37 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66f56b21-4305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:56:2b:c4:a3:91:48:88:e5:82:12:99:13:00:
b2:3a:34:91:7c:ff:04:62:c4:c9:66:98:4f:cd:60:
fe:ec:8a:49:b2:f0:be:3f:0d:e9:13:aa:e9:0c:20:
24:cf:99:7d:00:a2:e0:ab:c5:7a:0c:0d:1c:a7:3f:
99:38:7e:fe:f4:de:95:73:bf:f3:e6:ae:2e:50:01:
58:c1:44:38:15:fe:4a:fd:3e:d2:e4:07:5c:1c:74:
61:d3:bd:8b:d4:24:24:e9:8b:26:63:05:03:14:50:
51:11:7a:ce:74:7b:59:8d:f8:96:74:44:5e:15:e0:
6b:70:50:9d:2e:a0:4c:b7:8e:40:68:25:fc:9e:7b:
a5:42:2a:99:1c:0a:36:31:bf:58:17:72:b3:ce:ab:
c1:89:0f:bc:1d:64:b6:45:31:ce:fd:3d:ad:ce:c3:
ce:2d:45:59:b5:9f:b1:00:ea:85:c8:75:df:e6:51:
d5:d4:67:16:a3:d3:06:d3:bd:0e:6c:48:21:7d:e5:
94:90:f5:e4:0a:db:97:43:2a:ad:4d:c3:87:3e:e0:
68:5e:eb:45:26:90:2a:65:f7:6d:bd:43:d1:e0:14:
9e:57:2d:91:0b:5b:ba:fd:f1:68:9a:c3:f1:ef:2e:
6e:42:05:dc:84:0d:5d:f2:31:c2:d4:76:ed:74:bf:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:23:09:BB:A5:37:61:05:76:6E:90:D9:7C:83:3D:CC:1B:AA:01
X509v3 Authority Key Identifier:
keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/F6C5480A7C1011EF97676539C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ae:fb:04:72:05:47:63:5b:88:0c:f7:f0:fb:ad:51:74:39:
77:48:2c:b1:6f:cd:74:e6:a0:c0:b0:0b:3a:c9:87:3d:3b:8a:
da:c9:23:35:02:ec:1a:74:94:8c:ff:3b:cc:38:a2:ab:8d:83:
37:26:c4:83:75:0d:d6:ec:39:2e:88:03:a0:d7:29:65:d3:4b:
3e:74:5f:48:4e:0d:b5:64:3e:1f:b2:e9:21:03:79:3c:a3:fb:
13:03:42:27:f8:e9:55:29:a8:65:2b:d5:ac:77:aa:69:52:29:
18:79:ac:3a:2e:d6:c7:f5:79:23:09:8a:12:d5:80:f8:26:d7:
42:4b:c5:13:a2:39:ff:bb:bf:5e:fd:34:8b:f3:bd:53:3b:8f:
91:6a:e2:4d:38:ee:c4:60:7e:8a:d3:80:57:da:56:35:0a:31:
65:c1:78:0a:ff:ff:65:05:8c:54:0e:fd:d5:86:d4:ba:41:da:
e9:6e:1d:c1:a9:75:2c:43:c1:ca:31:34:5f:1c:bc:ff:2d:b5:
44:ad:a8:44:fb:2e:75:95:a1:69:e6:a5:57:f3:4d:07:ca:2e:
ba:94:8b:fb:bd:b3:38:7b:35:6c:3c:d8:f2:bd:f4:e6:90:94:
5f:9b:86:32:b1:5c:6a:7e:bd:b0:f9:6b:6c:03:e5:d1:fd:04:
ed:5f:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:59 2025 by rpki-client