Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa
File: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (raw, json)
Hash identifier: zvy+2HhQd/n3VOaiuMrL5/OccoJAnqCm0UAKCkrWeWw=
Subject key identifier: 37:3B:81:09:37:71:5B:21:2C:6D:7D:29:6B:26:A0:B7:14:87:F7:83
Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial: 02
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa
Signing time: Fri 14 Feb 2025 02:05:34 +0000
ROA not before: Fri 14 Feb 2025 02:05:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4764
IP address blocks: 103.60.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138679
Validity
Not Before: Feb 14 02:05:34 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67aea4ee-3e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:3f:e7:22:a3:ef:ca:d2:9e:4e:eb:ee:38:
d3:4f:56:f6:ee:54:01:a1:e5:68:82:46:a5:49:87:
75:14:d5:cb:ab:f7:21:46:19:30:b6:37:23:be:50:
f9:be:a3:16:bc:ae:4e:09:d8:36:c8:f7:b4:e1:96:
ce:15:ab:b4:4b:9e:52:ec:29:60:fa:43:3a:0d:f7:
63:9f:51:2b:58:c4:b1:61:7d:59:21:ea:54:04:a3:
33:3e:05:24:cb:be:36:9f:88:9c:95:62:50:83:11:
e2:75:55:6f:a0:b5:19:f1:d9:68:4b:6a:31:69:46:
2f:fb:33:8b:c9:88:de:7a:14:26:9f:3c:7a:5e:56:
c8:64:d8:ae:43:e3:e6:18:c0:69:28:71:fc:f4:27:
4b:e0:1c:54:87:c1:51:8a:1d:62:75:46:6c:aa:2f:
69:dd:8b:6f:ba:38:c8:92:14:7d:bb:b1:c6:0e:4d:
cf:76:01:63:c2:06:f3:31:40:58:a0:bb:0f:4f:f6:
d0:6c:1b:b0:1f:0c:8a:00:45:b2:b0:a3:32:8a:53:
86:86:50:3e:c8:b3:97:f8:0f:eb:4d:9c:76:39:b2:
4b:a2:24:24:0f:ba:95:4b:d6:0a:47:18:52:76:8d:
84:32:5d:58:00:10:1d:37:45:53:fe:86:d7:60:b5:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:81:09:37:71:5B:21:2C:6D:7D:29:6B:26:A0:B7:14:87:F7:83
X509v3 Authority Key Identifier:
keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.152.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:c3:be:82:13:de:5a:f9:f0:80:db:54:fe:c9:96:a8:47:df:
a6:1b:76:f9:8f:86:9c:2d:cb:5d:2a:b9:9d:13:74:4e:24:0f:
f4:35:71:ed:21:9e:85:9d:89:53:32:b8:ad:34:26:23:a5:8f:
27:00:0b:05:bf:0a:fc:77:1f:ec:d3:be:8e:6a:75:76:74:51:
46:75:1a:e9:6b:f4:17:38:ce:24:a4:a1:e9:ab:d4:54:18:f1:
a7:c6:eb:c2:d2:69:20:8d:a6:99:33:6e:c5:5e:f1:c3:3f:81:
c2:4e:22:42:5a:6d:e0:31:0c:bc:6c:09:bd:d4:4f:4d:c1:e5:
55:e6:0f:93:60:5e:25:4d:8f:33:c2:8b:0a:ec:f2:8e:8d:09:
9f:8b:1c:e2:86:20:8e:bd:fe:a8:b3:d5:84:bc:ac:69:25:ea:
00:bc:8c:3d:10:e0:0e:c9:de:76:a4:37:97:39:2d:b6:dc:a8:
a7:9e:57:ba:99:5e:cb:d7:83:3e:c5:3a:2e:ff:7f:05:b2:8b:
38:97:89:c2:73:1d:59:a9:3b:7a:da:15:2e:d1:2b:c5:88:20:
17:1c:0a:4a:2b:6e:58:c4:be:a4:ee:b7:02:39:65:9f:1d:fb:
86:bf:19:10:9c:31:5b:ba:fe:a6:88:87:da:aa:44:29:35:f5:
ac:5f:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:53 2025 by rpki-client