Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/5E141ECA055D11F0B9F0AF13C4F9AE02.roa
File: 5E141ECA055D11F0B9F0AF13C4F9AE02.roa (raw, json)
Hash identifier: XV8VZhNkhpIDo0T9GqAVKHHZUYHKcAXflYFOq8e8KjI=
Subject key identifier: F2:D3:D4:20:8A:9F:50:2B:DD:4E:62:02:51:03:98:2D:7E:D4:5A:4E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 079C
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/5E141ECA055D11F0B9F0AF13C4F9AE02.roa
Signing time: Thu 20 Mar 2025 07:31:42 +0000
ROA not before: Thu 20 Mar 2025 07:31:42 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134734
IP address blocks: 103.156.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8
Validity
Not Before: Mar 20 07:31:42 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67dbc45d-a6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:f0:2a:c3:7a:f2:4c:ab:95:63:96:53:bb:
45:81:61:a0:93:dd:8f:4b:7b:1c:48:2b:c2:6a:1d:
db:9c:e2:3d:85:28:3d:30:ea:df:3c:17:9e:fc:bc:
7d:1c:ca:d9:36:ac:a5:91:83:f1:ea:0e:8e:ab:7c:
e2:59:dd:91:5c:66:e5:71:d8:71:30:2f:29:db:1e:
ad:29:e3:97:02:13:a3:ae:20:3e:9b:fe:ca:44:b1:
c2:d9:f9:7b:5d:94:c1:db:78:2f:f8:fe:b2:f2:a7:
9c:42:21:45:96:c8:45:6b:9e:3b:f0:37:84:58:5f:
dc:c9:af:41:23:ba:c8:c2:3d:4d:40:cc:ed:bf:5a:
3a:e7:0d:37:56:de:76:85:58:d8:7d:9d:65:22:4c:
8c:99:ad:ff:90:b6:27:06:7e:e2:4d:3e:fa:9c:14:
c9:aa:fe:87:6c:15:ac:49:61:75:bf:53:e1:f0:73:
38:4a:09:1e:eb:e1:90:7e:56:9f:8e:a1:b5:30:67:
ea:f0:0d:4d:07:f5:02:45:a8:77:9a:a8:50:a8:2e:
bc:db:06:e6:30:ff:de:03:29:48:ec:f3:95:d4:ea:
cb:74:2e:fc:51:7b:14:95:82:da:6e:10:2b:ba:34:
8e:4b:ac:f4:a1:a2:6e:a2:ce:f5:6a:7b:b0:8d:0a:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D3:D4:20:8A:9F:50:2B:DD:4E:62:02:51:03:98:2D:7E:D4:5A:4E
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/5E141ECA055D11F0B9F0AF13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
65:22:49:f6:26:3d:0f:0f:39:45:60:a7:28:66:1d:f3:97:34:
9c:11:71:6f:85:7c:5e:6d:f2:02:b4:1f:76:20:ab:04:8d:3d:
16:59:0f:66:09:a2:4d:5b:83:b6:d4:61:74:69:96:15:52:cf:
6a:02:79:49:e6:6f:c1:b1:9d:4c:f0:64:8c:0f:d5:dd:f1:8b:
4b:9f:b1:64:d5:b1:fa:86:40:44:9c:6a:02:76:86:a3:da:7f:
3b:ab:75:fe:2d:c1:15:56:3b:3d:fc:50:17:97:a8:45:36:ef:
1a:1d:06:d5:48:bd:dd:09:14:56:7e:8e:4b:c2:9c:0b:6c:13:
99:92:a9:7f:a8:96:2e:5e:43:b7:b8:1d:2d:2c:2a:42:61:ff:
bd:b7:ff:88:2c:fe:0d:18:05:66:31:56:e9:6d:8a:30:97:4e:
f2:20:60:cb:0e:6a:c1:12:04:3d:8f:46:11:8b:66:3d:be:e3:
c9:9b:57:0a:88:ef:56:d6:a4:7b:ae:89:82:5e:c2:8e:ed:cd:
e8:50:5d:e4:85:3e:a5:9f:88:05:f3:48:d4:50:0e:b4:f5:09:
f0:15:7a:83:0e:75:04:db:70:b2:a2:10:46:2e:c7:41:19:db:
05:0b:f2:0f:86:05:0e:7d:c8:fc:fc:57:31:7a:11:e5:8b:18:
00:4f:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:19:19 2025 by rpki-client