Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/2C9AF3A2659411EDA3257D0AC4F9AE02.roa
File: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (raw, json)
Hash identifier: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=
Subject key identifier: 85:72:D0:1D:BD:2D:5C:FB:DC:7A:A5:C7:41:9D:63:AD:22:EF:D3:4C
Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial: 05EB
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/2C9AF3A2659411EDA3257D0AC4F9AE02.roa
Signing time: Thu 02 Jan 2025 22:52:33 +0000
ROA not before: Thu 02 Jan 2025 22:52:33 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139076
IP address blocks: 103.146.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A1D
Validity
Not Before: Jan 2 22:52:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677718b1-1700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:45:5a:cf:46:d6:52:be:97:7a:b8:bd:e7:
aa:b2:3a:20:e1:ac:db:10:7a:d6:49:dc:a7:62:36:
c5:ae:2f:ea:7d:20:c9:0b:19:b9:0c:8d:dd:e4:80:
a9:f1:19:8d:f5:ea:9c:fa:e5:94:12:01:ca:d1:7d:
28:b5:6d:d8:59:cc:8c:10:00:77:97:00:e3:0c:f5:
bd:ab:11:9d:2d:c0:53:b1:67:62:8d:b4:9f:4f:2b:
ff:0e:44:15:50:80:b7:09:55:58:27:be:79:9c:52:
0b:bc:c3:c0:dc:fe:91:36:5b:76:e2:5c:bb:41:bc:
8f:cb:f5:f2:bf:8e:e2:db:9f:13:c0:ca:36:24:ef:
c2:f8:a7:87:1e:3d:42:dd:c3:44:88:da:c5:6c:79:
75:f7:a9:4d:d3:78:c5:87:0c:f7:3e:bc:4a:73:66:
f5:f7:9e:5c:e6:87:58:c6:f1:62:90:c1:c9:89:c2:
1e:96:0b:10:32:4f:0f:a9:49:07:fd:66:06:3f:68:
f2:f7:8f:c2:de:31:5b:b4:ff:e7:52:4f:eb:06:92:
79:57:fd:a7:33:c8:9e:bb:a9:7a:64:ec:1b:af:d7:
33:03:88:74:6f:82:b9:67:e4:be:53:cc:86:2f:a8:
ba:b7:0c:a5:f7:20:b0:82:06:80:9c:72:15:e2:c2:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:D0:1D:BD:2D:5C:FB:DC:7A:A5:C7:41:9D:63:AD:22:EF:D3:4C
X509v3 Authority Key Identifier:
keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/2C9AF3A2659411EDA3257D0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.78.0/24
Signature Algorithm: sha256WithRSAEncryption
19:82:a9:45:de:21:5f:0b:f0:36:96:a6:0f:f7:e9:5d:af:12:
4d:9c:78:e0:d4:d4:f4:8a:78:93:b7:71:ba:86:50:c0:df:a2:
9f:99:b2:55:ae:17:2a:e3:0b:76:cc:9b:d7:a7:2e:07:20:61:
a8:e2:12:28:78:53:64:28:cc:68:05:6b:ce:df:0a:1d:d1:7f:
6e:48:b2:03:51:01:69:e8:1d:bb:e3:1d:99:7c:ac:26:42:85:
60:02:bf:5c:22:d7:16:91:c1:ff:b9:69:00:f7:fd:f6:d1:4e:
37:ae:fd:e9:c7:43:e6:ec:c3:e7:5a:ee:3f:ce:58:39:2b:2a:
09:8e:48:f4:90:78:68:8a:1d:38:1f:2e:e1:81:69:64:e8:72:
e0:50:12:aa:57:b5:53:bb:c8:0d:67:e9:97:e1:53:9c:ea:ec:
7f:ec:1a:30:b4:c2:1e:1c:2a:2b:7d:81:58:e6:22:1d:47:74:
48:66:b1:44:88:6b:4c:3b:8f:77:cd:da:95:b4:bf:aa:85:f7:
77:eb:b4:52:7b:23:90:27:27:67:0a:49:53:a1:1c:df:6e:f1:
13:92:d6:c5:69:b1:38:bb:e9:82:87:e4:d4:c9:85:29:46:66:
25:25:7e:5d:4e:f8:fc:bb:e7:2a:67:fc:5e:ff:2d:bf:58:55:
dd:58:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:27 2025 by rpki-client