Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
File: A534BB46BDC611EE902E692DC4F9AE02.roa (raw, json)
Hash identifier: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=
Subject key identifier: A4:F1:06:30:2E:5D:B3:A3:7F:E5:49:9F:2C:75:C1:F8:21:B2:6B:B7
Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial: 016B
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:46:07 +0000
ROA not before: Fri 03 Jan 2025 02:46:07 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 9230
IP address blocks: 103.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A79
Validity
Not Before: Jan 3 02:46:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67774f6f-aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:f4:83:d4:e9:59:58:66:07:fc:87:de:8f:
8b:c8:30:da:c3:fc:50:93:d5:58:60:27:60:bc:bb:
e1:09:aa:1a:37:c1:c2:a9:29:66:bf:b8:81:eb:ef:
fb:61:f3:27:b1:d3:ec:44:2a:ad:9b:7e:b2:87:07:
7f:e5:d5:a5:5c:b2:aa:b8:cf:4a:21:69:08:75:8c:
11:77:28:22:43:8f:2d:90:e5:42:28:2f:ad:72:27:
cf:2d:b4:2f:1a:fd:4f:e6:73:4b:94:94:f2:42:6d:
0a:7a:d0:71:ea:f3:73:0d:db:f7:1a:44:19:b5:bc:
f0:28:f8:21:3d:7f:98:b1:a3:f3:ed:7a:12:50:d9:
e0:ac:46:c0:b7:60:0a:8f:df:fd:7e:26:7f:07:42:
2f:84:0f:37:1f:41:16:26:b0:d7:56:19:83:f8:c7:
85:43:2d:da:e4:d0:11:13:9f:9d:bd:02:f9:bb:3b:
49:07:cb:32:62:a9:61:41:9e:bc:b1:f1:3b:f5:48:
96:80:67:f4:94:7e:5b:57:81:3f:b6:c1:7b:e0:d4:
ee:6f:35:bc:d6:8d:b9:1d:e1:f3:a7:61:2b:a6:42:
d0:0f:31:aa:23:dd:df:b7:b7:fa:ee:94:06:21:53:
ef:02:6b:a3:95:f9:d3:d7:19:95:4e:d3:8d:8f:7b:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:06:30:2E:5D:B3:A3:7F:E5:49:9F:2C:75:C1:F8:21:B2:6B:B7
X509v3 Authority Key Identifier:
keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:47:25:4d:f8:44:54:e4:ba:30:13:b0:73:af:8f:2b:05:d8:
ce:cf:f9:0e:e2:c7:cb:0c:fe:8c:e1:3d:3f:92:3a:81:d4:d2:
04:14:a2:d2:43:48:51:f6:65:f8:75:3b:7e:4b:cc:0c:31:f1:
b2:62:f2:7a:95:55:c6:ed:88:e9:ff:6e:63:a0:51:19:19:f3:
8c:29:fd:58:96:70:cd:6b:65:cc:ba:83:10:e4:dd:33:ee:87:
19:fb:2e:8e:fa:81:7b:9f:8d:b2:77:58:9b:9d:96:1b:d8:b4:
25:24:ee:21:9e:23:ab:42:6a:0c:27:e6:fd:5a:af:a9:7a:c0:
95:44:8c:ee:1d:f0:04:55:40:6e:80:bb:db:f3:52:d6:1e:3e:
19:3e:a2:98:10:5d:08:41:5b:d4:56:33:62:0f:ea:87:da:86:
f5:c0:58:8b:6e:59:15:db:b6:8b:5f:e1:c8:5d:68:b8:75:0c:
06:84:d4:52:48:af:f7:56:09:36:46:31:34:75:71:f7:9b:85:
b2:02:65:94:6f:dc:99:58:4c:9d:8c:46:0b:16:a4:11:fb:f3:
9a:02:d9:a1:cc:9d:1f:02:d5:0c:f9:d4:ca:bb:92:1b:04:6d:
cf:34:8c:70:b2:5c:36:0c:db:ce:85:d9:4b:6a:58:46:08:f9:
df:f0:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:48:08 2025 by rpki-client