Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
File: B534A848E2CE11EFA7030E56C4F9AE02.roa (raw, json)
Hash identifier: IJazIyHIF44pTPxQ+ChMh4PrZ/qmLQRUwrJ830VYj78=
Subject key identifier: 39:D7:D1:7D:1A:9B:DB:F4:19:B6:88:8B:A0:EE:2E:FC:64:85:3A:2D
Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial: 14
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
Signing time: Tue 04 Feb 2025 08:04:50 +0000
ROA not before: Tue 04 Feb 2025 08:04:50 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140999
IP address blocks: 103.173.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138959
Validity
Not Before: Feb 4 08:04:50 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67a1ca22-1f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:09:9e:3a:53:db:1f:ff:74:ae:fb:70:39:
63:e4:96:44:d7:7b:d8:60:ad:e0:e8:01:79:74:a5:
f6:bc:e8:40:62:bb:2a:46:90:c9:e1:b5:b8:60:86:
3f:ae:22:7b:1e:69:d2:0d:fb:74:ae:35:e8:4d:48:
d2:bc:25:bd:61:c0:03:b6:a8:b4:b0:fc:2e:21:10:
41:d9:09:93:76:9a:ee:8a:29:bb:b5:73:e6:5c:cf:
c3:a2:f1:c3:11:0e:5d:9a:af:47:20:7c:d8:9e:52:
8b:a0:d5:a8:a3:6c:b4:42:43:9f:1d:14:fd:77:66:
0e:31:98:45:5d:bc:c4:25:58:29:b5:f2:02:76:ec:
fb:41:1a:f9:35:b1:b0:52:5d:05:09:3e:ff:20:75:
8b:86:dd:ad:ec:cd:ce:12:ac:31:9b:2b:e4:8e:3e:
df:4b:5b:ae:b6:46:0c:61:9c:dd:47:17:83:d9:11:
72:a6:11:3e:91:3e:18:09:36:03:72:fe:d3:91:20:
96:dd:65:98:87:df:37:cd:f4:62:b1:6a:b5:9b:60:
18:b9:3b:51:80:1b:0c:ac:ab:95:84:f1:74:3e:0c:
70:a3:f5:12:af:03:fc:e0:00:0b:51:68:33:16:c2:
f6:57:24:93:4c:86:ab:20:8b:dd:eb:5c:0d:80:2b:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:D1:7D:1A:9B:DB:F4:19:B6:88:8B:A0:EE:2E:FC:64:85:3A:2D
X509v3 Authority Key Identifier:
keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.0.0/23
Signature Algorithm: sha256WithRSAEncryption
00:81:16:72:09:fd:ad:81:85:e3:a0:64:42:84:2f:78:b2:b8:
d8:e3:92:d7:d1:49:6a:e1:62:18:13:ee:39:71:e1:46:ee:ed:
0f:79:1c:ee:51:56:51:49:5c:b8:9d:06:7e:80:6a:b6:bc:c5:
cc:7e:13:ba:49:fc:32:f3:ea:78:76:cb:41:3c:68:bb:23:37:
44:d7:35:3a:cd:2a:09:ac:e4:4f:7c:a3:c2:7f:ab:3f:f5:9e:
cc:f0:a4:84:34:50:9c:08:17:2d:95:8b:04:58:3d:d4:ad:ed:
e5:10:1e:5a:3e:c8:a4:35:47:da:2b:5d:22:43:e6:21:3d:4a:
cd:5d:3b:18:ea:67:9e:2d:a6:0c:cb:aa:3f:16:20:ae:70:eb:
26:b7:3f:24:58:25:b6:84:72:e8:e0:e7:b5:a9:ab:8f:dc:20:
2a:6e:57:b2:38:04:fb:2e:05:2b:a2:01:12:c7:27:a9:56:88:
82:88:7e:2c:cf:09:d1:f1:ce:b5:ca:26:b6:6e:e9:45:71:67:
79:4b:0f:db:4d:a8:22:e9:ce:a4:1f:58:e8:cf:1f:ef:2d:58:
9a:d4:84:03:61:fe:2f:24:c6:10:8d:e5:3a:c7:fd:c0:07:db:
bb:9f:e6:3e:94:fc:92:81:e1:66:86:76:b0:34:99:30:fc:65:
81:87:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:07 2025 by rpki-client