Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/F409CCBAAF7611EE85B8CF2DC4F9AE02.roa
File: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (raw, json)
Hash identifier: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=
Subject key identifier: 8C:F1:91:C1:C1:52:1F:C5:0B:C2:BB:F1:85:D2:2E:F7:6D:33:7C:D7
Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A
Certificate serial: 073D
Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/F409CCBAAF7611EE85B8CF2DC4F9AE02.roa
Signing time: Thu 12 Dec 2024 21:30:31 +0000
ROA not before: Thu 12 Dec 2024 21:30:31 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24062
IP address blocks: 103.157.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF
Validity
Not Before: Dec 12 21:30:31 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675b55f6-88f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:7c:c1:5c:c5:02:5f:31:a8:79:83:e4:16:
86:f8:ec:48:65:07:39:b6:33:10:68:a9:33:0e:9d:
32:aa:27:63:cc:15:f9:b5:8a:d3:52:9b:90:6d:61:
f1:f5:d5:09:02:43:52:ec:ec:08:15:68:41:db:fa:
42:d9:05:9d:7b:3c:61:d4:04:20:75:98:6e:d5:63:
6c:83:15:2a:fe:e9:1c:fd:54:34:10:a9:53:0e:3e:
98:bf:53:f3:d3:84:7f:92:7c:6d:71:0d:a7:53:3e:
de:15:08:6d:9d:43:df:e9:87:c2:44:80:d3:71:b3:
ab:94:98:64:8f:32:8b:9f:bf:cf:e0:34:ff:69:f4:
fc:1e:4c:fe:33:e1:ab:71:12:58:bd:41:b4:f2:48:
f1:1b:9b:eb:bd:16:af:1d:e4:a6:d7:c2:9e:67:e8:
ea:01:43:8f:d3:1f:91:72:d5:01:be:5d:00:56:e0:
7e:f8:38:3d:bc:e4:be:87:05:89:61:d5:96:96:a8:
28:46:21:73:db:cb:3f:2d:af:c2:e3:05:61:fb:06:
d7:27:d3:2d:81:6a:2f:6a:9a:79:dd:c1:bf:d1:43:
04:ea:60:18:87:af:7b:0a:b9:d9:76:4b:15:52:6d:
b3:98:ab:56:48:9d:47:0a:44:3c:5f:c4:2d:9e:ab:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:91:C1:C1:52:1F:C5:0B:C2:BB:F1:85:D2:2E:F7:6D:33:7C:D7
X509v3 Authority Key Identifier:
keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/F409CCBAAF7611EE85B8CF2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:b4:1c:fe:c3:7b:17:63:55:4f:90:67:b0:44:c4:0c:b3:a4:
73:37:94:4e:8f:cd:94:0a:56:7a:41:05:15:b3:88:4a:97:73:
b4:e0:3d:c2:27:f6:2b:83:0c:10:74:5d:f3:e2:15:2c:91:8e:
14:6b:e4:c6:aa:56:51:37:90:0a:a0:e5:f5:2e:6a:65:a8:93:
3d:1a:7a:1f:3d:72:e9:90:a1:bc:ae:50:a6:7f:12:db:2e:f1:
93:07:41:e9:81:cc:fc:4f:fb:5e:b7:e6:c3:ae:67:ab:2b:91:
7e:8e:b4:d1:e0:ad:17:41:d5:80:8f:a9:92:01:90:24:c3:80:
fa:df:1c:0a:fe:c3:8d:26:18:77:f3:32:31:82:a8:81:5f:07:
f6:fd:a3:a3:1d:83:12:95:8b:e4:c2:cb:af:52:93:ce:9b:8e:
55:10:8b:a7:0b:27:ae:30:a6:36:9a:16:37:d2:4d:f2:cc:37:
9f:0e:7a:bf:17:cc:3c:b9:7b:81:7a:8b:e1:8b:67:21:e0:5b:
99:26:ce:53:c9:14:60:ad:07:85:51:ad:32:96:22:8a:11:b6:
c3:94:8f:7a:75:20:9a:09:f4:a5:c7:96:06:bf:b0:97:3e:89:
3d:7f:1d:ce:b8:a4:bf:c5:5f:04:4c:e3:4a:23:cc:65:82:0b:
35:6c:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:52 2025 by rpki-client