Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
File: 992104CE2EA211EBA8D67685C4F9AE02.roa (raw, json)
Hash identifier: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=
Subject key identifier: 5A:95:29:12:09:2E:51:4F:3B:A2:9C:38:D1:10:DD:8E:B0:5A:EB:D5
Certificate issuer: /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial: 0730
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
Signing time: Mon 30 Dec 2024 21:40:40 +0000
ROA not before: Mon 30 Dec 2024 21:40:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56382
IP address blocks: 103.158.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137917
Validity
Not Before: Dec 30 21:40:40 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67731358-776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:64:46:a2:4d:58:18:8b:c2:b2:e0:be:60:
14:c4:f3:5e:b7:ff:f2:e5:01:39:f0:50:5c:9a:54:
2e:b2:8a:04:39:ca:9f:50:3d:d6:b4:8b:36:cc:52:
27:85:5a:6d:a6:8f:47:de:80:cb:4c:40:7e:b9:a9:
c0:9f:5e:07:63:93:aa:ae:4a:4c:be:4a:e3:a9:7a:
cf:89:3d:f8:36:d1:f5:1b:ec:40:e6:9a:a0:77:fa:
db:52:6d:65:7d:a2:3e:b6:e5:b3:81:f5:f5:12:44:
11:26:f7:78:1f:e9:a5:4e:c0:a9:f6:86:fd:45:08:
fd:99:b1:b4:6a:05:c7:59:d3:0d:37:dc:69:e0:dd:
4a:b9:9c:49:79:84:83:96:e5:c8:bb:b8:79:1c:e4:
d1:1c:b0:c5:68:9f:97:81:ff:ef:7f:f7:9b:80:69:
a8:58:ab:ae:c6:2e:1f:12:6c:2f:25:2a:64:ab:04:
11:98:2a:1f:23:ca:a0:ef:d7:79:d2:07:73:ca:62:
c9:f0:c6:1a:e2:0f:df:f5:70:1a:5b:d8:42:66:c7:
57:b6:de:1f:1a:12:7c:2d:fa:81:37:6a:a9:d9:3f:
e3:94:f4:21:a1:0c:24:f6:bf:d1:f0:d8:50:d9:34:
e8:4a:0a:58:68:d9:24:4b:21:41:28:06:70:f3:08:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:29:12:09:2E:51:4F:3B:A2:9C:38:D1:10:DD:8E:B0:5A:EB:D5
X509v3 Authority Key Identifier:
keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/992104CE2EA211EBA8D67685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.223.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a7:3d:0c:ed:f1:01:be:e5:ff:a8:5a:5f:48:12:45:b1:ea:
55:f0:2c:27:0d:c1:c0:a8:4f:86:2e:c9:2c:a6:85:15:d8:77:
94:64:3a:88:4d:ea:b0:6c:cd:ca:cf:f1:57:6f:b1:4c:85:3c:
74:28:8d:a4:90:8b:2d:e9:eb:17:ae:63:e5:6a:ab:c4:45:75:
39:7f:f5:c6:03:92:1d:31:91:ab:fb:7f:8b:54:a1:36:0e:4a:
b5:3c:49:61:93:f5:42:9b:6f:fa:cb:4d:bd:65:0b:9a:fa:ec:
67:64:29:ea:ed:45:13:f7:5b:cf:d3:3b:82:6d:ef:05:bc:e3:
c6:cf:61:ac:a8:4f:6e:ea:31:21:ea:d9:08:f4:e3:1a:f0:e9:
97:2e:5b:8c:da:50:fa:1d:9a:57:46:e1:43:20:e0:0a:c1:49:
75:48:91:56:4c:0f:1b:79:fa:60:31:86:f8:5d:5a:7c:0f:d2:
1a:46:3c:2f:04:aa:ce:84:eb:bc:7e:dd:42:2c:57:01:af:e9:
33:5b:5a:95:bf:d8:b3:1d:c8:e7:14:99:6f:73:c5:c1:2c:70:
40:be:ef:f4:f7:98:29:3e:63:51:ba:b5:70:2f:dd:81:d8:60:
38:36:c6:31:80:47:a5:df:82:bc:c4:3d:41:9b:f3:53:8e:ad:
2c:69:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:06 2025 by rpki-client