Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/760E95F6C6AA11EFAAE05A0EC4F9AE02.roa
File: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (raw, json)
Hash identifier: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=
Subject key identifier: 3E:47:81:73:5D:3F:20:76:FA:5B:5A:AF:9F:88:67:2A:75:C0:5A:97
Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial: 013B
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/760E95F6C6AA11EFAAE05A0EC4F9AE02.roa
Signing time: Mon 30 Dec 2024 12:34:50 +0000
ROA not before: Mon 30 Dec 2024 12:34:50 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140612
IP address blocks: 103.139.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185896
Validity
Not Before: Dec 30 12:34:50 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6772936a-2f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:26:91:4c:1f:12:19:7a:50:b3:94:34:90:
24:ad:cb:d5:77:79:9a:81:77:78:d8:94:5f:12:a4:
22:15:f6:96:b3:44:42:48:0e:0b:de:39:99:bb:f0:
f4:a8:4d:b6:48:bd:66:45:1c:58:16:9f:d0:d9:1e:
e3:23:62:d2:c6:4a:a9:5c:97:d7:0b:e7:a6:f2:59:
50:f0:b6:22:62:58:25:95:a7:7d:b7:c9:31:0f:bc:
e4:11:72:f1:1d:63:4f:72:49:59:68:cc:2c:0b:a0:
6d:55:40:38:0a:76:ce:6b:c1:35:0e:79:2c:68:fc:
46:fc:67:a7:a4:26:b1:f5:b8:fd:5c:3c:5e:05:19:
64:ce:f5:5d:2f:9b:31:21:55:60:c2:58:63:b6:15:
6a:4d:72:f7:01:50:6c:1f:71:e3:94:0e:56:e6:65:
7d:f0:05:b8:3a:96:a2:98:d6:3a:2b:57:b8:e3:e7:
17:db:4b:46:a8:95:44:7c:b0:f4:16:f3:41:ed:14:
9b:b5:0e:93:57:cf:3e:28:31:e6:82:01:2b:cd:2c:
21:d9:ab:85:4a:74:5b:0d:54:3f:7b:90:72:a8:c7:
1a:fc:68:99:ea:bb:b9:b1:8b:16:de:75:ff:a5:17:
5b:2d:1c:23:5a:b4:c6:51:04:5d:7f:25:18:0b:16:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:81:73:5D:3F:20:76:FA:5B:5A:AF:9F:88:67:2A:75:C0:5A:97
X509v3 Authority Key Identifier:
keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/760E95F6C6AA11EFAAE05A0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:78:7a:05:ef:98:8d:d8:6f:d3:a6:4b:10:ed:80:06:29:db:
19:4d:35:ac:b4:f5:9b:d1:8d:9b:71:e7:85:5f:2a:e5:82:aa:
3c:19:a4:a2:3d:e7:a7:ba:38:99:48:d9:04:1b:fb:c8:cd:8b:
8e:1b:cf:af:b5:ad:08:d1:65:1a:4a:1b:27:fd:45:3a:ba:b4:
6b:5b:6e:66:6c:ba:00:d1:b2:f2:7a:cf:fa:a4:ef:77:fa:aa:
e8:ba:23:0c:9f:5a:2c:a7:7f:64:1e:a6:76:95:a3:48:32:91:
74:2d:04:46:09:04:f6:30:ef:c7:e3:bb:f7:8b:7e:5b:cb:cd:
4d:20:1f:82:e6:9f:2c:45:4a:5e:4e:ab:9b:9f:bc:13:c7:8f:
52:60:18:01:9b:b9:83:c0:5c:30:13:9d:93:c9:4c:72:30:8d:
18:c7:80:ee:40:e9:71:e8:68:38:da:65:9b:0a:f6:b3:19:02:
4f:4e:c0:75:97:8f:aa:7b:db:2b:bf:b2:f1:a3:e8:10:71:52:
f2:f3:ed:1d:f9:c2:b2:8f:23:5a:5a:5f:92:2b:5c:25:d0:2d:
45:95:16:35:67:a2:c5:c7:c7:22:55:0b:c5:ad:9c:15:e1:4a:
07:9a:72:f0:a2:9d:e8:f0:3d:18:78:03:79:f6:f4:b7:fd:01:
45:82:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:30:03 2025 by rpki-client