Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
File: 028B893CEC2411EF98681981C4F9AE02.roa (raw, json)
Hash identifier: fXh12/SGZaJ4jJop6lG7WGIAHeL6kmecMBKy6wN0cto=
Subject key identifier: 48:1A:96:19:A6:22:84:5A:02:11:A8:B7:6A:C2:95:23:8B:47:45:36
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 0716
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
Signing time: Sun 16 Feb 2025 05:08:09 +0000
ROA not before: Sun 16 Feb 2025 05:08:09 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140973
IP address blocks: 103.154.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1814 (0x716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856
Validity
Not Before: Feb 16 05:08:09 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67b172b8-3579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:94:b0:76:11:42:ca:73:d0:c8:a9:83:dd:
6e:91:31:43:cc:88:c6:64:db:91:89:a9:56:3b:3a:
bf:40:c8:97:eb:af:a5:b9:28:88:3a:de:df:94:6d:
8b:87:73:a1:6f:ab:1e:dd:38:c5:a3:9b:49:e4:b1:
06:5f:4f:8c:99:5d:b9:1c:80:ce:53:58:d0:ae:9c:
ef:2a:60:ad:67:05:43:87:b7:9c:03:1c:cc:a4:87:
ba:1e:f9:fd:b7:81:46:87:fc:e8:c7:f0:61:3f:66:
81:82:f4:1d:6b:00:8f:37:15:bc:8f:db:ce:97:62:
5b:b2:01:10:58:67:2f:84:af:75:46:75:77:c8:b5:
b9:80:20:6e:83:54:dc:d2:da:8f:31:3c:ba:1f:37:
51:8d:28:87:bf:03:4b:8f:b1:54:6e:a4:8d:52:7e:
09:f1:0d:35:b9:b9:af:4c:b3:60:a6:f1:99:1c:4f:
2d:e7:55:b9:76:97:36:fc:96:3a:a0:6d:9d:21:f7:
04:4a:ea:19:f9:ba:b5:ea:06:d1:35:35:14:9a:37:
df:fa:1a:3c:8a:43:05:f7:fc:1c:55:6b:7d:00:05:
a1:78:44:4f:8e:89:06:42:92:dc:ae:92:26:2f:7a:
d2:f5:0a:b0:45:86:ae:f2:dc:5b:3e:61:3f:e1:69:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:96:19:A6:22:84:5A:02:11:A8:B7:6A:C2:95:23:8B:47:45:36
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:72:a9:1d:56:01:da:39:e3:ad:96:16:1c:6f:f5:7d:b3:54:
2d:0d:e6:60:e3:f8:28:b8:75:93:6a:c3:63:06:ec:01:7c:36:
8e:59:2e:ed:f4:ef:93:ed:4d:e2:06:3a:66:2a:fe:ef:f5:dd:
62:c0:62:d2:3d:e7:b6:cd:65:ad:4b:c7:2b:bb:d1:a4:a1:e3:
29:6a:26:1a:e9:40:50:7f:29:29:c6:f0:fa:44:c0:2e:33:75:
9f:9c:ee:d7:8e:53:24:81:23:ee:66:14:13:41:64:71:52:4b:
05:80:26:10:40:e2:47:e7:40:34:7d:4a:87:0e:1b:1f:a3:25:
d5:2d:c7:3b:a3:18:16:e2:3f:0f:f7:d2:17:84:f6:7d:4f:ae:
49:59:5f:a1:80:26:40:2f:3d:68:9c:19:15:45:3a:36:8d:d3:
f8:be:ba:4a:4d:ad:6e:8b:7d:0a:4e:87:f1:94:89:52:d6:cf:
a8:57:b2:ba:91:b3:07:00:6a:7a:2f:aa:01:4a:e2:9e:ae:cc:
0e:ae:f1:7d:d1:1d:f4:39:dc:56:63:c1:a0:5a:96:c1:ef:71:
2c:05:14:54:fd:41:e3:13:51:dd:54:42:8f:11:c9:a0:52:88:
9b:5c:68:ab:aa:9a:c0:80:00:e8:f4:9c:8b:2a:76:f9:a8:6e:
7e:fb:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:24:06 2025 by rpki-client