Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa
File: AE26CE12180911EB962CB216C4F9AE02.roa (raw, json)
Hash identifier: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=
Subject key identifier: 5C:15:AE:D2:3A:4A:30:39:6A:E6:53:C0:93:8F:00:7A:5D:8A:63:0D
Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial: 072F
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa
Signing time: Wed 04 Dec 2024 21:40:26 +0000
ROA not before: Wed 04 Dec 2024 21:40:26 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141371
IP address blocks: 103.157.198.0/24 maxlen: 24
103.157.199.0/24 maxlen: 24
2001:df5:2a80::/48 maxlen: 48
2001:df5:2a81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183F7F
Validity
Not Before: Dec 4 21:40:26 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750cc49-31d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:fe:8b:91:61:ba:aa:ac:a4:51:a0:bf:75:
3e:bc:1a:6e:40:b6:2b:9b:cc:31:96:3e:e7:c0:48:
26:06:3d:f5:11:d8:9a:81:31:9f:60:c2:9a:69:c6:
24:71:fe:ae:a2:38:c3:aa:17:65:c7:a3:97:cb:1d:
1c:48:25:07:87:98:68:21:55:32:f0:30:f1:73:29:
33:1e:be:0e:ab:14:75:98:cc:e7:c4:cb:3a:3b:c6:
fe:7f:3a:a5:86:4b:70:ea:f3:b6:c0:13:c9:ca:99:
af:5f:43:b5:50:05:f9:36:30:56:0f:22:3f:62:b8:
22:a0:40:e8:14:a1:84:3a:5d:b4:1d:45:bd:10:3b:
a4:ec:72:91:df:49:89:d0:72:1f:74:28:4f:00:dc:
25:50:01:86:fb:35:f5:a5:b8:4d:86:06:25:08:0b:
f0:85:1f:98:f8:e5:18:1f:e4:bb:cb:b9:79:50:2f:
b5:37:a0:8d:84:b7:11:e8:e9:4d:dd:e8:8a:22:99:
a0:99:ec:a3:0a:85:f6:2a:8b:ce:ae:bb:67:39:b1:
23:8b:d4:26:21:54:2f:89:d2:c0:96:45:97:64:d0:
1d:fc:1a:f1:74:a9:11:d1:26:2e:a9:13:5a:7d:94:
c2:24:b5:21:75:26:b1:e9:66:e7:fa:e0:a6:33:aa:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:AE:D2:3A:4A:30:39:6A:E6:53:C0:93:8F:00:7A:5D:8A:63:0D
X509v3 Authority Key Identifier:
keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/AE26CE12180911EB962CB216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.198.0/23
IPv6:
2001:df5:2a80::/47
Signature Algorithm: sha256WithRSAEncryption
82:89:4a:b5:30:19:2b:fe:57:d4:bd:15:bc:4d:eb:d2:f4:ac:
98:f4:e0:99:54:b3:1b:d9:a2:58:8b:9c:83:7f:6c:13:63:9d:
d8:33:a9:5b:b3:b2:4f:f1:e4:ef:6e:08:a8:82:fc:de:08:61:
93:c8:38:86:62:78:e3:66:a0:9a:af:1c:4b:ef:e7:61:e1:a1:
c2:9a:0c:43:c2:4b:63:fc:df:73:d1:cd:d4:4d:f6:2a:da:9c:
43:e1:d7:eb:5b:99:40:1f:0d:5c:7f:75:8d:91:76:dd:5c:45:
6a:04:94:64:9a:0e:78:84:75:de:49:5d:af:e4:1f:6a:07:cb:
bf:ed:82:15:9a:a2:97:ad:d0:c3:8a:b2:b9:b8:3d:3f:51:26:
89:d9:0c:89:62:c6:67:8a:db:f8:a5:6e:f3:22:60:19:78:74:
5f:da:54:d7:6c:c9:09:6c:d9:91:7c:af:f3:90:bc:23:de:04:
ec:8c:37:79:c5:e1:ff:f2:f0:f0:8e:86:20:9a:39:d0:cc:67:
da:c8:77:70:cf:b6:eb:1b:f2:5a:bb:8d:a2:ed:d9:ec:10:6a:
74:4b:cc:7e:24:25:0b:02:b7:bd:cf:d0:b3:7f:1e:a7:ef:05:
94:9a:ab:6d:b7:dd:23:e1:d9:32:b5:d9:4e:bf:75:c8:74:44:
ac:04:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:25:02 2025 by rpki-client