Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
File: F8636CC60F9D11EFA1E14343C4F9AE02.roa (raw, json)
Hash identifier: 4Oh915WthhJlwOOKgV/sOS+biKgr/hNx4EVmX21QhO4=
Subject key identifier: D7:19:A4:10:0F:9E:03:65:A1:B5:CB:B9:D5:8F:C0:34:3A:E4:74:B2
Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial: 04
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
Signing time: Sat 11 May 2024 13:54:22 +0000
ROA not before: Sat 11 May 2024 13:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38532
IP address blocks: 103.53.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153675
Validity
Not Before: May 11 13:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663f788e-108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:e6:da:68:40:2b:75:53:9d:6f:da:1d:f7:
29:df:ff:b4:35:ce:f7:d0:4f:21:16:3c:89:a3:0b:
91:6b:2b:ae:27:aa:f9:1b:b5:f5:f8:0c:ec:8b:a9:
28:c8:e7:66:fb:b6:06:2b:59:db:22:40:54:86:72:
93:23:8f:17:7c:75:87:1f:a8:5f:f4:62:67:c0:ea:
12:5a:ed:a9:95:4a:b4:85:9a:e3:ce:f5:07:be:c5:
9f:3e:26:e8:57:d8:ca:10:ac:aa:46:84:31:ac:9a:
41:3d:eb:86:df:6e:b6:eb:07:04:56:35:dc:1e:8f:
9f:39:5f:83:5d:3b:6e:ca:75:c8:d6:97:f9:33:03:
06:4b:e0:53:f2:cb:66:93:7c:d2:cf:d9:a9:8d:94:
af:72:a9:fb:c4:6f:c7:ff:83:19:27:61:03:94:9e:
e6:9b:dc:3a:96:cd:68:47:6f:85:e2:78:9b:08:64:
4a:10:fe:92:46:df:8a:a5:bd:f2:8d:01:b0:9d:db:
d4:58:92:41:08:6d:d5:61:a9:7b:59:24:94:7e:7b:
85:e3:8a:b3:5c:7c:b7:f1:9a:ce:46:c5:48:d1:75:
9e:3a:fa:54:98:8d:46:d3:68:80:37:64:c1:84:38:
90:76:98:2c:52:3e:21:72:6b:a0:ea:01:78:85:e7:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:19:A4:10:0F:9E:03:65:A1:B5:CB:B9:D5:8F:C0:34:3A:E4:74:B2
X509v3 Authority Key Identifier:
keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/F8636CC60F9D11EFA1E14343C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
18:e2:18:10:b5:90:ba:d6:98:ad:b2:40:6a:98:99:15:9c:3b:
4d:68:04:6c:3c:91:b1:4c:64:a0:49:70:39:7b:b8:8f:9c:3c:
3a:7d:57:3a:fc:b8:93:f6:7b:6b:c0:74:d1:17:0b:f5:f9:0c:
78:46:4d:ff:97:64:ad:ef:2c:b8:d8:24:45:70:b8:39:f8:a2:
7c:17:2d:99:2f:7f:11:c1:8a:2e:3f:bc:be:fd:c8:cc:9c:76:
5a:e7:66:f6:8a:c3:66:cb:98:05:82:8d:c8:ab:39:b2:d0:bd:
89:1a:b4:de:a5:85:01:69:32:04:9f:0a:74:ed:7f:dd:0a:c8:
22:59:f2:83:7c:52:f4:bc:6a:57:96:7e:5b:8c:dc:ef:50:a1:
eb:cc:99:1c:f1:7e:32:3a:3d:df:61:21:56:4a:01:e8:8d:d6:
27:82:08:38:6e:09:e9:66:0e:c0:03:2b:fb:f7:a4:87:14:0f:
a6:d6:b2:28:c7:87:df:a3:89:2b:1e:45:5f:02:de:fc:46:4e:
29:71:77:28:f7:b7:40:c3:37:c2:48:a6:ab:6e:b3:b7:87:14:
84:84:42:82:17:7e:6e:20:1f:a0:ba:05:d9:92:ce:4d:42:ee:
26:b0:ff:8a:18:a5:55:07:15:ab:c6:57:f3:55:27:69:f3:5b:
10:a5:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:41 2025 by rpki-client