Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/DA47C056CE6B11EF90780D14C4F9AE02.roa
File: DA47C056CE6B11EF90780D14C4F9AE02.roa (raw, json)
Hash identifier: EzHWgLC0j2JdU5tEg1YwqpWRC9geTQXSNnvrqMSSZ+0=
Subject key identifier: FB:77:18:13:AE:3A:CD:0B:8D:59:25:BE:D8:C0:0F:B8:FA:58:3B:70
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 0326
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/DA47C056CE6B11EF90780D14C4F9AE02.roa
Signing time: Thu 09 Jan 2025 09:44:35 +0000
ROA not before: Thu 09 Jan 2025 09:44:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.215.125.0/24 maxlen: 24
103.215.126.0/24 maxlen: 24
157.119.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806 (0x326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5
Validity
Not Before: Jan 9 09:44:35 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677f9a83-6b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:cf:3c:8c:e6:6f:4a:8b:ae:9b:90:33:c8:
fc:2b:3f:21:9f:39:af:d5:93:22:00:a8:8d:af:52:
ac:10:81:27:be:61:8b:a1:51:0d:b3:5e:c8:fc:17:
cb:5d:bc:d3:e8:b9:78:5c:f3:57:3b:bb:1c:df:66:
2a:3b:35:10:d2:53:d1:a5:95:f4:18:81:e5:0b:ff:
0b:34:a8:1d:0b:15:bb:b6:a6:a5:78:af:14:65:1e:
fd:5d:00:58:0d:f4:ac:7b:e0:37:76:c2:ca:0a:ab:
c6:b7:67:d1:9d:b8:7c:bc:61:c2:39:bb:75:72:07:
fa:64:17:f7:e2:6e:60:6a:a3:3f:12:4c:65:84:6c:
52:b9:71:22:56:94:c2:05:b1:05:19:b5:9a:2b:70:
22:16:c0:3e:6b:ce:bd:fe:8b:97:36:82:6b:de:d7:
94:1b:72:7e:89:70:0b:25:d4:cd:8f:5f:98:df:53:
41:25:2c:2e:18:a8:5c:60:de:ad:29:f7:5a:d9:41:
b3:8f:d3:e1:a0:4b:72:e6:d2:14:88:b8:7f:0d:34:
2d:c1:97:16:ee:8d:37:77:42:fc:3b:74:99:14:68:
6b:57:00:ad:ab:c5:4c:05:04:30:9f:57:9b:60:a7:
7d:37:a7:a8:38:53:ca:60:28:18:e2:17:5d:a1:af:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:18:13:AE:3A:CD:0B:8D:59:25:BE:D8:C0:0F:B8:FA:58:3B:70
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/DA47C056CE6B11EF90780D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.125.0-103.215.126.255
157.119.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:53:db:1d:86:7d:28:40:3b:f4:3e:5b:c2:c0:66:47:01:df:
3b:f4:45:89:94:87:46:82:db:b8:ea:18:f7:98:1d:c4:0d:31:
9f:64:86:fa:97:9d:4a:6e:8d:a2:86:65:62:65:3c:9b:9a:f7:
ce:94:0e:c7:34:2d:8b:15:03:bc:ff:50:3e:76:3b:26:b0:20:
70:c8:70:ae:81:e8:18:8e:0b:5e:74:be:9e:d6:8b:72:5b:04:
20:dc:90:2c:35:19:42:4b:d3:cb:c3:95:71:0f:86:ba:f5:2b:
9d:61:86:18:11:74:94:f5:c6:90:5f:5f:14:82:82:4f:49:6d:
a1:f8:27:df:34:48:c7:b8:d5:f0:d0:1e:9c:00:02:f5:2c:52:
e4:57:1d:01:fe:ae:80:39:20:d6:13:91:df:7f:58:b1:b6:0c:
f0:fe:c4:e9:07:c7:84:aa:5d:6d:73:ab:71:08:35:09:9e:df:
61:e6:98:b4:fb:9b:2a:95:cc:e0:67:f5:48:d0:84:98:97:b4:
90:54:fb:90:25:1a:90:b4:50:4b:f5:19:b9:43:15:e7:20:b0:
30:ad:47:4a:62:9d:6f:08:0d:8e:4a:39:cc:22:13:80:59:55:
9c:73:21:44:cf:33:e1:eb:e7:9c:f4:92:c5:cc:a6:a9:62:9b:
76:11:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:32 2025 by rpki-client