Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
File: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (raw, json)
Hash identifier: ZawsauuQVy3/xITjsqsOJpATtDgEASJhh1tB3zSZBaE=
Subject key identifier: 00:F9:3C:DC:BE:D9:11:C1:D3:A3:A4:10:31:8C:DF:2D:DE:6A:50:98
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0B95
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
Signing time: Mon 30 Dec 2024 18:47:49 +0000
ROA not before: Mon 30 Dec 2024 18:47:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139771
IP address blocks: 103.145.28.0/24 maxlen: 24
103.145.29.0/24 maxlen: 24
2001:df1:f180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2965 (0xb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB
Validity
Not Before: Dec 30 18:47:49 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6772ead5-9eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:e6:4e:7b:39:7f:b7:14:95:4c:1d:2e:e3:
e8:be:00:d0:ca:09:2c:83:e0:4c:fe:eb:6c:83:77:
fc:f5:f5:e6:da:c4:95:99:29:74:8d:03:3e:64:63:
b8:81:10:b2:79:a7:ac:47:f2:a7:cb:d6:69:88:d9:
a4:e9:a7:a9:7f:0f:0e:6a:21:c5:d3:5a:cf:93:d0:
f2:18:6b:55:3e:0b:68:96:6d:14:cd:b0:b9:43:b5:
82:0f:2b:35:49:31:4b:7a:d0:94:d9:a5:6d:21:c3:
f2:1d:02:b4:cc:22:7d:e4:e8:65:2a:c5:d6:b3:71:
b5:44:df:eb:72:63:e7:06:33:6f:d1:c2:a3:85:e6:
56:dd:50:99:39:28:0e:cc:fa:ac:2d:5b:23:b3:c1:
d0:ee:c9:2b:a0:63:05:4c:99:11:81:dc:3a:e3:40:
59:31:ae:13:fe:a2:e1:16:33:11:04:10:de:66:68:
7e:51:96:3f:2c:0f:34:0f:09:76:e1:88:0b:6a:2b:
45:9b:24:f2:a1:32:43:c2:40:64:8f:ba:46:fb:11:
c4:d7:f5:a7:ce:aa:09:d7:4f:d6:a5:63:ae:74:d8:
58:69:d7:98:bd:1c:6d:61:d8:59:1b:39:a0:dc:c6:
2a:cc:62:45:c8:ff:26:11:a4:98:54:71:a1:51:ea:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:3C:DC:BE:D9:11:C1:D3:A3:A4:10:31:8C:DF:2D:DE:6A:50:98
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.28.0/23
IPv6:
2001:df1:f180::/48
Signature Algorithm: sha256WithRSAEncryption
79:8e:6c:e7:82:4a:df:0a:55:7d:ba:03:70:b1:80:9d:38:a7:
c6:08:b7:13:d7:81:aa:e6:fe:10:8d:e9:24:8d:57:54:d7:7e:
bd:68:93:0b:19:83:d7:63:c9:a8:ba:2e:ed:e0:fc:23:40:1f:
47:5d:2e:86:49:6b:6a:87:73:59:e9:3b:cc:2a:cf:b6:7f:63:
a9:40:20:67:01:d6:4e:d6:72:53:20:a8:ff:7e:ca:e3:87:6b:
31:0c:6b:51:86:b0:ae:62:25:4b:6e:95:97:9d:6a:0c:34:03:
1d:74:d1:fb:46:43:7d:da:74:aa:92:06:3b:73:60:38:1c:34:
18:8b:1b:d0:3d:47:38:da:a0:72:fd:83:e5:d8:70:d8:1d:52:
9f:32:02:77:6d:84:81:b3:5e:c4:0e:19:93:49:a2:d3:07:df:
49:f1:b9:e1:ac:2d:97:b5:2d:93:79:92:56:f4:74:20:b8:55:
2e:20:0e:76:7f:d9:c2:be:bf:6e:5d:59:c1:cc:f4:fb:7f:bb:
5c:f9:b4:44:c1:1c:6d:e2:4b:0a:16:73:15:05:2f:6e:d6:4e:
ac:26:e4:0c:5c:42:64:fb:66:08:5f:25:3c:fd:d1:cf:dd:27:
3f:74:2e:c0:fe:ff:94:05:dd:ce:1e:41:bf:03:ba:11:e4:9f:
72:71:33:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:05 2025 by rpki-client