Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
File: 45A44C4CBDCE11EFA998797CC4F9AE02.roa (raw, json)
Hash identifier: uF3ApeX12An5gPwPWJ0xuIUZ7U4GMw4TciK6PWiK5sI=
Subject key identifier: 40:F6:11:C6:08:CC:93:6E:FC:2D:91:AF:9B:E2:CC:BE:5D:66:D4:45
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 0711
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
Signing time: Sat 15 Feb 2025 10:26:22 +0000
ROA not before: Sat 15 Feb 2025 10:26:22 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137580
IP address blocks: 103.154.12.0/24 maxlen: 24
103.154.13.0/24 maxlen: 24
2001:df1:ffc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856
Validity
Not Before: Feb 15 10:26:22 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67b06bce-7149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:15:6b:6c:a5:bc:cd:42:5e:af:c3:6d:f1:
06:f6:52:86:b7:b3:0a:bd:3b:82:15:3d:7d:78:26:
5e:d4:b8:c0:4b:51:b9:a1:30:16:b3:30:b9:c2:53:
6d:39:d2:6b:9e:3e:fe:86:d4:56:48:a8:46:d8:be:
56:a3:e7:a7:32:db:5a:9f:34:c1:21:6d:36:6b:0f:
6d:b0:8a:3a:2e:8d:02:5b:e1:83:df:f0:c3:bc:12:
9b:b3:2b:e2:42:99:f4:44:87:b0:ad:9a:b2:50:ae:
57:04:54:fd:67:7e:f0:d6:74:7c:46:c5:fc:ae:15:
c2:96:91:80:d5:ca:10:b2:b7:b3:e2:b1:02:fb:f4:
7f:7d:e2:7c:42:c1:42:b8:48:3d:bf:43:72:0b:fa:
f7:b4:bb:5c:f5:a4:4b:3d:65:b2:ef:c3:8b:8d:8a:
8f:50:61:b4:60:15:07:c7:0e:f5:e1:82:b8:89:79:
7c:2a:cf:90:ef:fe:7d:38:7d:8c:c6:00:0c:36:c2:
9d:e9:a6:1c:76:21:fc:20:0e:cf:2d:bf:f2:4c:88:
12:e0:d3:90:34:78:9c:f0:0f:b6:dc:1f:5f:08:5d:
7a:d4:94:08:97:43:f1:1d:08:88:ed:87:76:8f:31:
80:2e:0d:03:7c:ed:09:7a:0e:9f:8d:64:52:0e:e6:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:11:C6:08:CC:93:6E:FC:2D:91:AF:9B:E2:CC:BE:5D:66:D4:45
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/45A44C4CBDCE11EFA998797CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.12.0/23
IPv6:
2001:df1:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
a4:0c:e3:7d:2e:8f:58:14:3d:67:e4:ae:d3:c5:c8:74:b7:03:
de:12:a3:12:2e:6c:69:7b:2c:9d:17:57:5f:32:cf:d5:49:c6:
47:34:a8:ef:0e:d7:07:af:5f:e4:69:88:0e:dd:00:66:a5:c3:
03:2c:72:ab:2d:1d:df:a8:ca:bb:54:c8:4e:19:db:d4:66:65:
6b:ea:e2:a9:8f:b7:04:4e:7c:ef:a7:6d:2a:2c:71:07:1a:13:
df:ca:5a:79:6a:19:b7:27:ab:23:81:7f:a7:b3:bc:b1:66:58:
de:1c:42:88:a6:26:67:76:d6:70:41:24:97:be:42:a2:09:b8:
18:66:8f:6f:bf:0c:5b:9d:d1:a1:1f:62:d2:cf:64:ee:f0:87:
3f:fb:fc:f0:d6:0f:56:c3:0f:cc:63:65:5a:70:b8:f2:0d:da:
3d:b9:95:a7:d6:01:a0:8e:46:47:23:47:bf:06:8f:5d:69:a7:
2c:37:fe:93:d0:66:00:90:92:a7:d7:23:7c:de:8a:e4:ca:92:
cb:99:cf:c7:e6:a4:db:e2:34:38:a5:84:76:05:aa:b8:eb:71:
97:33:a5:9e:24:3a:14:eb:a0:70:1c:a4:96:0f:57:4c:09:c2:
04:c3:4d:e4:75:d0:59:1e:b1:2b:a2:d4:eb:9d:bf:c7:47:a4:
c3:84:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:31:50 2025 by rpki-client