Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/BB0569102A0411EB992DD32EC4F9AE02.roa
File: BB0569102A0411EB992DD32EC4F9AE02.roa (raw, json)
Hash identifier: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=
Subject key identifier: 14:8A:D7:F5:04:E2:88:E7:5C:D0:C4:EA:74:AD:9E:FD:76:88:AA:7B
Certificate issuer: /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial: 072D
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/BB0569102A0411EB992DD32EC4F9AE02.roa
Signing time: Mon 30 Dec 2024 21:40:38 +0000
ROA not before: Mon 30 Dec 2024 21:40:38 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137490
IP address blocks: 103.158.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137917
Validity
Not Before: Dec 30 21:40:38 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67731356-d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:dc:f8:b9:9c:0e:a4:50:98:3c:ba:66:04:
38:54:2e:2e:3b:dd:84:cb:05:89:15:16:5d:85:16:
af:be:ad:6c:3a:6e:84:a8:e8:98:c1:c1:8a:64:e3:
f7:1a:34:8c:c2:45:df:0c:79:37:47:10:7e:be:fb:
99:c6:ca:96:06:21:7c:97:ff:64:41:df:3c:cc:fe:
ff:da:1b:af:46:f8:fd:6a:88:f4:b4:4e:78:17:c7:
7e:b7:ea:8c:11:02:13:e9:40:8a:62:39:13:08:16:
d1:0e:f0:29:e9:bf:5f:87:28:7e:37:59:da:b8:7b:
75:4a:59:cb:50:40:dc:e9:4e:c3:ac:1c:52:df:59:
61:d4:42:7d:7b:4b:71:90:aa:31:79:da:b3:dc:75:
55:4d:e8:e5:a2:69:d8:12:c5:26:f5:8c:3c:13:22:
28:d8:9a:ad:1d:e2:3b:44:4f:41:6f:09:a0:f6:f2:
99:ff:51:7e:f3:15:06:68:8d:9e:a4:41:16:d8:4f:
68:6a:b7:4c:d0:91:f8:d8:e0:9f:ea:65:ba:e8:63:
2f:f3:0c:1c:69:e5:67:7e:5c:53:74:d1:28:9c:4f:
35:67:6d:80:ca:4f:37:5b:5a:45:c9:74:16:b4:e6:
61:b1:7a:27:18:78:87:e2:f9:7a:0b:72:11:98:50:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:D7:F5:04:E2:88:E7:5C:D0:C4:EA:74:AD:9E:FD:76:88:AA:7B
X509v3 Authority Key Identifier:
keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/BB0569102A0411EB992DD32EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:33:b2:af:f1:aa:2d:a4:a8:54:84:29:3b:87:7b:89:12:d1:
ab:60:6c:6d:04:d0:81:aa:8d:fb:e5:08:13:2f:0a:ec:ae:c4:
3d:1c:d4:75:0e:41:3f:d8:42:b5:3e:98:56:75:6a:36:f2:28:
51:47:88:ca:d9:22:94:60:21:22:b0:30:c9:1f:ab:32:07:bf:
32:69:bb:02:b8:ef:f6:33:9e:70:ec:56:a6:49:30:9a:ad:35:
2c:83:be:7c:59:7f:92:be:2f:a4:5b:a0:a3:11:f7:33:04:1b:
fb:b8:67:58:51:ca:db:15:52:26:4d:d7:42:b9:25:6d:d5:0f:
69:52:75:41:8c:46:81:00:cd:f1:68:5f:f4:6a:34:8b:fe:3c:
1d:aa:7d:85:fa:e6:f2:9d:0a:44:2a:c1:9d:6b:27:0f:6b:07:
7f:63:ef:62:33:ba:ce:22:92:55:f5:99:39:ae:ba:9e:f7:fd:
ca:64:bf:85:06:c2:2b:9d:04:59:57:c7:14:e1:20:68:b0:d9:
a7:ae:7f:00:3e:67:cb:48:c1:bc:41:7e:b9:d8:e2:05:6d:58:
61:05:8e:da:8b:59:d1:85:65:2a:ff:1f:c0:2a:79:75:77:2c:
9d:87:72:9d:d5:ed:5f:29:23:1a:cd:b2:05:9e:44:f9:e0:fc:
73:d2:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:59 2025 by rpki-client