Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa
File: FB5C375499DB11EBBC50C376C4F9AE02.roa (raw, json)
Hash identifier: 5Tmm0+rmyNGdrIMpYadnPDVCCaqTEqx1NCKBxNGJPGM=
Subject key identifier: 0F:E2:B4:5A:BF:01:AB:95:C4:7B:BE:C7:D4:90:85:F9:CB:92:C5:22
Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial: 0B5B
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa
Signing time: Wed 08 Jan 2025 19:08:27 +0000
ROA not before: Wed 08 Jan 2025 19:08:27 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139808
IP address blocks: 103.145.112.0/23 maxlen: 23
103.145.112.0/24 maxlen: 24
103.145.113.0/24 maxlen: 24
2001:df3:3180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC79
Validity
Not Before: Jan 8 19:08:27 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677ecd2b-6b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:4b:d7:ca:10:96:34:11:00:82:fc:26:f5:
7d:94:52:56:35:7d:70:fc:d1:f7:e2:0a:71:9c:18:
43:7d:08:c2:45:18:4e:8b:9d:fb:77:7d:1b:22:93:
3b:b7:40:4e:c4:b6:c7:fc:cb:ed:c2:8f:02:dc:20:
b1:ed:a9:06:88:30:52:88:03:f3:8e:61:fc:49:a1:
d7:0b:c4:b2:bd:c9:87:7d:54:17:ed:97:c2:3b:2a:
dd:fb:24:f9:b0:7b:cb:24:8d:4f:72:7c:b2:aa:89:
fc:b2:6e:95:c5:f1:2c:d3:47:f9:04:28:9d:9a:19:
5f:3d:7c:c8:2e:1b:82:68:b4:32:25:05:78:87:16:
dd:c3:23:02:96:86:4e:bd:f0:90:60:c5:e7:17:b3:
cf:dd:39:c7:21:06:28:79:a7:94:d1:96:36:d6:a7:
68:97:80:09:1c:1c:dd:18:15:f4:14:0f:36:18:b8:
95:95:78:f4:39:d0:15:4f:25:5f:f1:d5:36:6e:e9:
d4:b7:29:fe:46:1b:b6:c9:07:dd:0d:4e:77:ed:1c:
13:27:1f:57:81:ed:34:e2:1c:3a:a5:a5:87:ea:65:
04:3e:e7:a9:b0:47:bb:bb:54:12:9d:d5:90:8b:32:
2b:51:ae:be:b2:f2:39:d6:11:14:7a:8b:4d:c9:5d:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:B4:5A:BF:01:AB:95:C4:7B:BE:C7:D4:90:85:F9:CB:92:C5:22
X509v3 Authority Key Identifier:
keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/FB5C375499DB11EBBC50C376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.112.0/23
IPv6:
2001:df3:3180::/48
Signature Algorithm: sha256WithRSAEncryption
81:2a:ac:2d:e8:72:88:c0:38:3e:58:12:dc:e9:e6:7a:61:8a:
37:7f:23:5c:c2:ad:df:e1:ac:d2:99:31:5b:51:91:c1:32:06:
d5:a6:72:bf:38:43:e5:cb:f9:ef:fa:3e:0d:bc:8d:2a:30:02:
4d:81:95:24:07:e2:e5:9e:63:0d:46:09:10:e8:8d:e6:9d:43:
ce:ed:34:c4:40:14:60:91:1d:ea:2f:f6:a9:e1:46:f0:ce:e4:
57:95:8d:dc:7a:bd:1f:c3:ee:9b:42:8f:9a:74:07:6a:27:1e:
45:b8:d4:c5:ab:8f:56:e8:22:ea:e7:11:fa:0b:64:3b:01:54:
c7:35:4f:54:30:65:fc:ba:b9:6f:2f:8f:0d:a8:b4:62:58:df:
16:df:02:c6:08:5a:fe:cf:48:f8:cf:bb:69:93:f6:59:b1:f9:
30:d0:c5:94:78:1f:5f:e0:40:47:ef:32:36:db:2d:b4:e5:ba:
ed:0d:80:b1:cd:f5:d5:58:60:55:7e:46:d7:77:09:c5:ca:e4:
74:cd:9e:58:aa:4b:6f:0e:d9:b5:bb:81:87:54:e9:3f:75:c7:
4b:82:26:d9:dd:e1:e7:c4:1e:62:ba:ad:be:82:ed:49:9b:9c:
0b:46:8d:0a:e2:0b:b5:74:af:60:81:73:7a:86:5e:f0:76:75:
7d:39:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:22:52 2025 by rpki-client