Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa
File: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (raw, json)
Hash identifier: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=
Subject key identifier: 3A:16:F3:46:FE:0F:41:C8:10:E2:03:D3:08:C8:BC:52:C9:8F:4A:59
Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial: EF
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa
Signing time: Fri 17 Jan 2025 03:56:46 +0000
ROA not before: Fri 17 Jan 2025 03:56:46 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151968
IP address blocks: 103.67.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159FAF
Validity
Not Before: Jan 17 03:56:46 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6789d4fe-42b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:fc:a4:ea:31:0b:1d:08:c7:ee:1a:9f:b7:
e3:a6:62:17:2f:dc:f7:16:e9:8c:3a:ae:f8:84:c1:
cb:f2:f5:5e:88:46:a4:90:aa:41:30:c5:e3:af:0b:
b6:6b:0c:3e:05:42:c1:bd:66:0b:0b:e6:00:37:68:
b6:2a:52:42:5d:b3:61:21:cc:9c:f8:06:3d:ca:27:
4c:1c:40:63:34:95:41:99:bc:35:71:04:2d:94:bc:
f5:0c:54:33:aa:25:ce:fd:d1:4e:f0:89:64:d1:7e:
71:60:e6:c1:66:ef:75:38:74:73:ec:34:97:3b:c4:
d6:2c:a1:07:8a:0b:cb:fc:0d:4a:fb:ef:e3:1c:68:
bd:6c:bd:0c:48:4a:3e:fa:e9:33:5a:65:a0:e3:05:
58:10:10:42:b8:33:11:bd:09:87:72:57:16:32:b2:
d9:d4:47:ae:aa:8c:69:0b:e1:01:49:49:ac:71:9d:
de:00:76:8a:bd:6a:e6:17:2e:bc:92:f9:d5:3d:ff:
b0:ed:72:61:83:9a:f4:57:f0:79:d2:f9:82:37:2a:
5d:cb:c7:8e:fd:9a:ad:bd:3e:db:2e:b9:47:ed:41:
f5:3b:2a:ff:e9:da:e0:ce:8f:e8:59:08:bf:70:c6:
97:e5:a6:ea:cc:85:8f:40:89:57:bd:f3:05:9a:d1:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:F3:46:FE:0F:41:C8:10:E2:03:D3:08:C8:BC:52:C9:8F:4A:59
X509v3 Authority Key Identifier:
keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:56:3e:ea:c6:d1:20:94:75:56:9f:1d:f5:f0:55:b6:78:67:
27:8c:8f:4b:2e:09:89:fa:e6:0c:55:d6:eb:e8:df:f4:74:2f:
76:9c:f3:98:d8:a9:e3:83:fa:78:fb:c2:d5:f9:bb:90:cf:0e:
d9:23:71:88:0e:b2:cc:e4:6a:fe:34:d7:31:3c:10:0a:ce:c7:
81:8b:26:0c:b8:0a:3e:e7:99:c3:a4:00:b6:4b:d7:76:d2:a2:
3a:90:02:66:1c:68:79:af:10:f6:80:2d:d1:24:c8:d1:27:1a:
60:27:78:36:7e:8a:0b:4a:d2:85:4b:44:5f:89:b0:26:23:ba:
24:48:ab:51:76:e0:d0:8e:f4:d9:e1:68:50:32:a5:bf:8c:1d:
6d:63:26:24:d3:12:08:25:2c:17:30:74:2a:d0:9b:ba:07:ff:
e4:35:75:c3:5c:98:9f:5f:10:22:c4:8a:55:87:3f:95:e2:25:
a4:c8:d0:02:fc:5b:2d:93:4f:ea:92:34:7a:41:9b:14:cc:b2:
c8:ff:e6:ba:02:a5:ac:be:e0:96:20:a0:59:74:ac:c4:6f:4d:
2c:a2:82:74:9a:2e:8e:7c:a9:11:ac:2b:3a:9f:db:e9:68:e9:
dd:7f:fa:91:bb:36:fd:35:66:20:e2:b7:9c:29:27:2c:e1:ec:
f0:8f:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:58:59 2025 by rpki-client