Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
File: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (raw, json)
Hash identifier: GayQFIjNRG0i4Xav60C+tvTYkjjCA22TmJl4oiKb6AY=
Subject key identifier: 36:24:AE:CF:CE:19:67:BF:61:04:4C:B2:B2:26:41:8D:38:BF:B9:EC
Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial: 4E
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
Signing time: Thu 07 Nov 2024 05:18:53 +0000
ROA not before: Thu 07 Nov 2024 05:18:53 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 7575
IP address blocks: 103.36.12.0/23 maxlen: 23
103.36.12.0/24 maxlen: 24
2402:ec00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6
Validity
Not Before: Nov 7 05:18:53 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672c4dbd-08f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:e5:60:e0:39:c9:73:ed:e6:e8:33:27:19:
9b:87:4f:df:e9:3d:8e:38:5d:6c:3f:c8:3f:5f:d2:
97:5f:82:cf:51:07:e1:22:e6:8d:0c:a6:85:6f:54:
e3:23:57:0d:a4:e4:f7:da:f8:7e:33:81:11:44:7d:
30:4c:b3:7d:b2:8f:4e:81:1b:bb:aa:fb:b7:78:1a:
35:b9:0f:ae:ff:d4:3d:99:cb:02:19:8f:dc:2f:30:
f6:e5:d9:3c:0c:3e:93:df:53:05:7b:a5:a3:cf:0c:
72:3b:0b:43:f2:58:e9:26:9e:f4:a3:0e:af:6c:5c:
2e:d0:7d:9c:3a:78:f2:49:f4:96:30:91:f0:2d:6e:
5f:ec:33:83:a9:6b:23:a0:7a:94:77:0a:10:c6:1a:
b0:eb:f5:17:93:c8:ee:83:ae:77:18:37:04:12:a8:
95:3d:79:50:50:a5:54:85:ac:48:9c:57:96:bb:fc:
90:17:95:72:db:16:e6:1a:92:ab:8f:0e:92:de:71:
00:91:d5:b6:0b:60:b3:08:c7:6a:f7:86:27:66:eb:
70:fd:56:29:e9:31:59:43:9d:5e:56:bd:cf:17:c1:
4f:79:f4:70:04:ce:d9:31:7f:89:91:5d:4b:20:46:
0c:30:7c:f7:6e:99:dd:ec:96:af:af:85:4d:41:57:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:AE:CF:CE:19:67:BF:61:04:4C:B2:B2:26:41:8D:38:BF:B9:EC
X509v3 Authority Key Identifier:
keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.12.0/23
IPv6:
2402:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
40:ab:8a:68:8a:7c:cf:b6:a2:24:ca:fb:21:d2:9b:3f:73:ff:
49:8f:fc:e4:39:be:b5:d1:86:21:00:83:b4:8e:c3:a3:31:8b:
27:0e:6b:0d:56:d0:5a:15:d5:7d:17:4c:5d:11:a2:98:b9:07:
04:0d:e1:17:95:95:90:9d:b6:f5:53:02:53:07:56:7e:d8:2e:
d2:2f:b3:34:e7:cc:b4:a7:0d:40:ae:4f:75:e9:f3:15:8c:87:
9a:1e:db:1d:3e:a7:06:c7:5b:38:2f:67:2a:92:7d:cc:34:75:
dd:b4:67:f7:15:a1:e2:ed:7f:7e:f3:ab:3d:1e:86:9a:d9:a0:
95:7b:c7:5f:5c:d9:c9:36:88:a8:51:e9:4c:76:f0:b2:37:10:
62:35:85:0e:3a:ff:34:c6:27:5a:45:c3:41:30:f5:e1:12:2d:
d3:71:a8:01:ef:d6:48:dd:04:17:9b:f5:f1:1b:3e:7d:1c:bc:
c1:c8:88:e5:5f:d7:f7:92:4c:a8:32:83:67:68:ce:c0:5a:98:
7e:10:e7:f4:53:b9:5f:6d:84:6e:73:ea:dd:3d:73:71:78:ad:
27:03:e7:e1:12:9b:60:c5:54:a1:ba:56:21:20:e4:24:74:b1:
34:80:ad:0d:76:0d:74:f9:5b:e1:5e:a1:fb:58:c4:b1:c4:12:
88:82:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:24:19 2025 by rpki-client