Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa
File: 5B9B8A1213F311EBA7343351C4F9AE02.roa (raw, json)
Hash identifier: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=
Subject key identifier: 7C:82:6A:80:0B:B0:80:6D:77:9F:D9:D7:D1:D4:37:CC:19:E3:5D:03
Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial: 0732
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa
Signing time: Sat 28 Dec 2024 21:10:14 +0000
ROA not before: Sat 28 Dec 2024 21:10:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132825
IP address blocks: 103.125.84.0/24 maxlen: 24
103.125.85.0/24 maxlen: 24
103.125.86.0/24 maxlen: 24
103.125.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914450B
Validity
Not Before: Dec 28 21:10:14 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67706935-5100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:4c:e9:d5:d4:6a:c3:6f:33:1b:09:03:cf:
73:43:6e:42:cc:c8:b9:05:17:74:4c:f6:ab:48:76:
36:6f:c6:e6:1d:d5:a7:2c:81:ab:9e:f6:60:51:b1:
34:4b:63:65:ae:4d:76:ba:8c:c6:a9:00:67:1d:56:
20:96:e9:2e:23:77:ea:2c:fe:ed:5a:ec:44:9d:33:
3f:96:77:83:5d:c0:1c:d1:01:80:db:80:18:ec:92:
80:b1:a5:51:96:19:c0:0b:2c:bd:c3:d0:8e:07:56:
fc:e0:09:81:24:26:39:92:63:ac:90:ae:58:f3:b7:
57:65:7b:54:91:91:96:35:00:72:67:b0:c7:ba:ed:
16:e7:98:7c:f6:72:a5:9e:eb:20:cc:0c:34:b6:72:
d4:f5:6f:60:31:95:a9:ce:f7:da:84:35:c3:76:53:
c7:a2:31:67:e4:84:21:7c:94:39:0e:68:ff:f2:96:
54:c6:d0:e5:a5:ee:38:16:8f:6d:92:d4:98:67:26:
9c:85:9a:f2:29:45:41:84:02:3a:28:4c:30:80:06:
ad:b5:f8:c5:85:81:cb:60:67:41:8a:f1:cd:77:23:
58:15:52:26:90:1f:dc:6d:d6:b2:34:3a:0e:ec:62:
a9:df:c3:13:78:9a:55:9a:f0:79:32:68:f3:97:b6:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:6A:80:0B:B0:80:6D:77:9F:D9:D7:D1:D4:37:CC:19:E3:5D:03
X509v3 Authority Key Identifier:
keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ba:86:f7:cb:88:1c:a7:55:b7:c6:65:62:e0:3f:22:bd:09:
00:9c:4c:f7:3f:60:7e:3e:53:37:d4:da:ba:9a:7f:cd:cb:eb:
20:b3:83:49:28:94:a7:b5:b9:d6:61:7b:3c:5f:db:1e:aa:12:
95:0c:b4:5f:3e:a6:de:56:e1:00:2d:18:d3:52:a1:8e:52:f3:
0e:bf:a0:59:fe:00:e5:9c:a4:b6:79:2b:bb:58:1b:f9:f5:78:
90:42:71:bc:c0:ef:c8:bf:92:ce:36:42:77:9b:fe:2d:98:e3:
2f:03:ba:e3:96:76:31:c4:60:e6:13:1f:da:0a:81:b0:c1:c4:
2c:f9:15:64:5d:35:81:c1:6e:bb:36:5a:90:0d:56:6b:94:29:
43:d1:2a:2f:ba:18:44:a0:46:63:e6:19:47:81:0d:c5:ff:dd:
54:40:b2:e0:f6:9c:59:b8:a7:d4:30:d9:77:2a:64:e2:b5:c4:
5b:cd:b6:9a:b1:26:8c:63:6c:ca:83:c6:49:03:7a:6f:da:f4:
a3:5a:69:8b:32:eb:6c:e0:98:24:63:f8:6b:41:32:f5:45:c3:
49:8f:8d:7a:ab:87:41:55:3a:81:e5:47:9b:5c:39:7f:31:b0:
f1:2b:ee:49:1c:4f:09:ef:c6:cb:87:2f:02:3c:aa:88:e5:60:
e9:65:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:32 2025 by rpki-client