Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa
File: A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa (raw, json)
Hash identifier: UR/M76En4r1uz4AqvlYe6bzumLcHbv7IRP0UcS8FSf4=
Subject key identifier: E0:26:A4:61:2F:8E:DB:4B:96:32:DC:60:5B:04:89:2B:59:B5:A1:E4
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0116
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa
Signing time: Thu 06 Mar 2025 16:04:16 +0000
ROA not before: Thu 06 Mar 2025 16:04:16 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 151106
IP address blocks: 103.72.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647
Validity
Not Before: Mar 6 16:04:16 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67c9c780-5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:de:55:b3:05:c6:42:c2:62:12:5b:3c:d3:
8a:91:dd:6b:1d:c9:46:0a:6e:a1:80:a8:93:3c:48:
84:6f:71:ef:af:26:8f:55:c1:d7:48:be:e6:9a:1d:
1b:96:7c:6d:73:6d:42:f7:8d:e4:1c:d2:0b:04:e1:
2d:2e:24:4e:01:1d:45:a0:4f:b6:be:bc:37:49:b3:
aa:d3:7e:88:26:13:ed:3a:6e:1d:e5:01:65:61:f2:
5d:04:fb:ce:c4:ad:8d:51:b4:ea:9c:47:8b:56:63:
7f:10:01:8f:8f:a8:56:f8:44:8a:cd:0c:5f:f5:89:
05:39:15:4d:9d:77:82:7a:22:9b:4c:ab:49:89:5f:
27:75:71:45:bb:dc:44:a1:db:32:62:6b:8a:a8:64:
e6:3f:d0:ec:fe:0a:c3:4a:94:02:c6:1b:b3:d6:24:
fe:ca:01:78:e6:4f:86:c7:3a:bf:99:30:7b:81:4e:
2b:5e:da:c8:7b:4e:db:01:44:04:59:67:7f:b2:b9:
e0:f6:78:da:01:e2:b0:35:e5:cb:65:6a:e1:e3:89:
ef:8f:06:17:df:e4:ea:3a:d5:7e:8f:17:9b:f4:20:
d3:75:37:cb:0a:98:54:bc:f3:af:79:d8:59:0e:f3:
80:eb:c1:de:c5:c2:4c:3a:90:40:42:b2:f3:45:f2:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:26:A4:61:2F:8E:DB:4B:96:32:DC:60:5B:04:89:2B:59:B5:A1:E4
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A75C4CD8FAA411EF9D7B5F80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2b:f5:b3:38:e8:13:2a:54:d0:a0:5c:7c:20:68:37:15:5c:
32:1b:68:c7:88:0b:47:95:cb:a0:8f:e3:cc:20:dd:89:5e:46:
f9:0a:c7:50:37:e6:e0:6a:69:f5:18:51:27:45:3d:76:24:c6:
20:0d:9a:bd:ce:19:1e:ba:7d:61:fa:c3:d2:48:7d:26:d7:ea:
ab:64:c7:18:89:84:78:b7:e8:16:90:d7:5f:5f:1b:ef:a3:04:
66:d0:ba:76:e4:87:48:e7:d5:bd:91:30:bb:c4:28:cf:2e:23:
4d:5f:76:6f:37:f7:c3:32:77:10:ab:03:cc:67:5d:d1:81:ea:
7a:23:cb:3b:fd:5b:83:dd:3d:b2:7c:10:13:aa:1b:b7:70:90:
a7:25:96:eb:37:25:89:d8:71:d7:76:c1:27:c4:1f:0c:8f:4c:
d5:26:e8:2c:a0:90:bc:17:b9:5e:e3:91:1e:48:f4:94:a9:c6:
b6:7f:1f:1f:7e:92:d5:ea:ba:33:10:b1:a6:f4:bc:04:ca:71:
38:20:80:58:3c:e4:c9:28:d2:d1:71:ba:26:97:39:13:37:84:
c0:e4:3d:38:95:95:95:06:0d:ae:ee:ed:01:ac:c9:a0:af:dd:
dc:7d:48:18:f9:a5:0a:d6:ef:c9:73:d0:af:41:1b:a1:c8:f4:
56:64:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:44:56 2025 by rpki-client