Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/D2C5CD06C61811EFB531B045C4F9AE02.roa
File: D2C5CD06C61811EFB531B045C4F9AE02.roa (raw, json)
Hash identifier: 4VdBwEO26va1fKvLT7rzx6QEmvDohLmWoqi2DN2HMW8=
Subject key identifier: 54:1C:01:50:95:F4:DC:69:CC:7B:E7:2A:03:93:83:20:C4:2E:4A:25
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3487
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/D2C5CD06C61811EFB531B045C4F9AE02.roa
Signing time: Sun 29 Dec 2024 19:12:19 +0000
ROA not before: Sun 29 Dec 2024 19:12:19 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151734
IP address blocks: 103.21.137.0/24 maxlen: 24
103.21.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76
Validity
Not Before: Dec 29 19:12:19 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67719f13-07ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:10:81:1f:03:da:62:14:cd:6a:a0:66:86:
22:5d:5e:60:c6:27:73:6a:33:84:be:47:ca:38:49:
83:bd:cd:cc:04:c6:51:82:9a:9b:b8:eb:23:b8:8a:
40:d9:58:99:9f:a9:58:b1:36:5f:0a:78:e8:c9:a0:
71:f5:cd:71:e7:d8:d3:92:60:26:12:1b:b8:be:c8:
1b:45:50:b4:10:4b:6e:b9:3a:84:4d:b1:84:76:79:
93:4f:7e:91:9d:72:2c:28:71:20:8a:bd:99:3d:a6:
3a:ce:0d:1e:b7:67:f8:2b:e9:c4:32:af:51:71:f2:
9a:04:67:23:38:0e:0b:26:14:ee:bf:6c:66:77:08:
46:af:5b:66:3b:37:f9:55:82:df:d3:16:f0:15:f2:
ba:5b:5e:4c:c2:43:f2:52:43:22:72:4f:d6:8d:b3:
19:08:e5:f9:2b:93:28:9c:d6:64:4a:06:43:3f:69:
df:73:a9:66:44:5e:4c:b0:4e:77:5b:a8:74:e3:52:
57:4d:3f:8c:3a:22:a8:0e:9e:86:a0:a4:81:94:fd:
d5:24:ff:94:e0:57:25:17:ea:a6:68:b7:d2:81:87:
e9:db:b8:6b:4c:c3:5b:af:d2:35:8d:e1:e2:ab:26:
db:ed:4e:06:a7:05:34:25:a6:6f:b7:6d:5a:e7:16:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:01:50:95:F4:DC:69:CC:7B:E7:2A:03:93:83:20:C4:2E:4A:25
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/D2C5CD06C61811EFB531B045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.137.0/24
103.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
02:97:bc:e2:3f:c8:47:61:a1:63:79:cd:e4:33:07:44:78:39:
f8:c6:f5:15:30:61:ea:69:90:24:04:3e:02:18:38:60:90:46:
f2:1c:66:ae:25:e2:1e:33:7e:46:d0:84:81:41:22:84:62:9f:
2c:cc:b9:01:43:34:a5:e8:03:1b:fb:b7:4d:79:f2:d3:30:97:
e4:75:34:95:b8:37:30:de:17:82:2f:56:c0:80:5f:77:0d:6c:
bc:76:fd:50:3f:7d:19:fe:a4:5b:e2:4f:41:bf:c3:d7:fe:93:
1f:16:33:d3:a9:bc:d9:09:39:94:61:5d:3e:3e:0f:11:c3:54:
0e:c5:d9:68:39:c0:50:09:e3:90:e4:82:41:c0:99:70:0a:59:
1f:ca:23:40:13:e0:ce:82:cf:6c:c8:0c:10:8d:32:3c:f1:fb:
b5:0a:78:fa:06:56:84:c7:81:3d:d0:e1:29:1c:ba:1d:51:7e:
83:50:24:d7:88:23:6c:d9:fa:e6:af:1d:51:12:98:fb:ef:e8:
e2:f4:1c:de:fc:8f:fe:ad:e3:86:29:06:32:94:7d:4e:a1:e6:
46:37:fd:44:a9:a3:a4:2e:34:b4:0c:80:0c:68:ff:9f:2d:79:
7b:dc:4c:6d:0e:63:cd:47:98:3d:26:34:48:fd:20:df:8d:c0:
d3:a1:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:24:50 2025 by rpki-client