Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/D043FFB2EEEA11EF8476F316C4F9AE02.roa
File: D043FFB2EEEA11EF8476F316C4F9AE02.roa (raw, json)
Hash identifier: d0hp0Sxp9bpuLv2RTPfRkiHtp3hXJCna7dmoo8SCZV0=
Subject key identifier: DC:CE:2A:12:C9:4C:09:FB:CD:7B:64:57:9C:01:EB:84:DA:70:13:1B
Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial: 05F8
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/D043FFB2EEEA11EF8476F316C4F9AE02.roa
Signing time: Wed 19 Feb 2025 17:56:16 +0000
ROA not before: Wed 19 Feb 2025 17:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32135
IP address blocks: 103.136.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E80
Validity
Not Before: Feb 19 17:56:16 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b61b3f-c2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:d4:5a:1f:88:26:16:98:f5:dd:a0:4f:f5:
40:2e:d9:16:7b:25:30:b9:10:3e:3d:0c:4e:29:1e:
5a:4f:9b:73:14:3b:c2:37:02:56:28:32:d6:48:11:
40:c2:b0:d8:c3:2d:c9:70:f2:11:67:68:c5:81:b3:
6c:6a:5e:17:d0:05:ad:e7:64:12:ee:06:da:b7:cf:
88:49:24:3b:f4:41:54:9b:44:1a:39:88:4c:a6:f5:
c2:b9:1a:0f:1d:33:3b:68:65:74:c6:3a:11:fd:9c:
6c:9b:17:96:bc:ed:24:5c:68:a1:fe:65:c4:3a:47:
04:b8:1e:94:d8:73:a2:85:d4:fc:83:a9:83:10:45:
28:69:55:7f:f1:ad:e8:10:2f:32:3a:64:19:b6:92:
f1:7d:92:6a:e6:7e:12:6f:e3:cb:4c:69:d7:d4:3c:
cf:86:0a:f8:54:86:ab:ab:98:19:e8:b9:c0:61:3d:
5e:a8:62:e9:c4:99:e7:10:5e:58:c6:37:16:2c:d6:
38:93:b4:85:21:21:90:9b:4b:31:71:30:ad:13:a4:
16:d4:63:97:b2:4d:77:98:e3:f7:c0:6a:19:20:54:
a9:64:d3:50:7a:80:ca:46:49:67:b3:2a:08:b0:f7:
61:f9:ff:48:a6:64:d8:9b:49:9f:73:ab:76:61:ec:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:2A:12:C9:4C:09:FB:CD:7B:64:57:9C:01:EB:84:DA:70:13:1B
X509v3 Authority Key Identifier:
keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/D043FFB2EEEA11EF8476F316C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:26:e6:5d:2c:e6:f5:65:01:34:e5:a6:35:dd:0e:1d:cc:c3:
4d:26:c6:72:32:2b:37:72:c8:37:03:6d:c3:a2:45:bd:73:37:
c6:b8:ec:07:bc:11:c5:15:29:b0:87:64:cf:a1:85:db:98:1c:
9a:0f:49:96:51:17:b0:3f:39:14:30:1d:c2:eb:e6:73:59:0c:
fd:d6:77:f4:11:42:2a:f5:0d:e1:11:5b:10:36:b4:5b:ce:cf:
e6:ba:5e:ef:82:93:0d:3c:07:eb:d4:da:a8:bc:68:46:06:9c:
88:14:7e:60:4c:78:22:fe:96:8b:db:d1:78:1c:a8:1e:2f:64:
0c:51:d0:71:4d:78:24:8e:61:d7:c1:a5:72:27:dd:7e:60:1e:
ce:67:01:64:70:de:11:43:bc:16:77:2f:29:72:c2:b5:f1:87:
1a:e5:3e:51:79:0e:0e:68:4c:ab:94:5b:1e:ee:fc:ef:02:1f:
eb:52:2c:f3:c1:fd:7b:00:1f:1c:f2:53:79:7f:bc:70:18:63:
6a:ce:6c:2e:0d:cc:98:31:9e:4d:9d:ba:6f:c5:98:54:9b:ee:
bc:af:7c:04:f8:8e:39:50:98:12:90:70:05:80:65:fc:1b:d3:
79:a2:d6:b7:28:5c:be:0f:12:1a:1b:ae:24:cb:6d:5e:13:58:
9d:97:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:36:58 2025 by rpki-client