Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
File: 72F52C962AF511EA8C989441C4F9AE02.roa (raw, json)
Hash identifier: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=
Subject key identifier: 98:40:98:BA:3C:BB:20:D3:44:98:C0:B2:29:BB:82:5E:56:2A:EE:F9
Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial: 0B34
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
Signing time: Thu 26 Dec 2024 18:57:15 +0000
ROA not before: Thu 26 Dec 2024 18:57:15 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139813
IP address blocks: 103.145.134.0/24 maxlen: 24
103.145.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4E89
Validity
Not Before: Dec 26 18:57:15 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676da70b-c45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:68:14:7d:7d:dc:1b:9e:3e:b1:63:47:f5:
65:66:fa:ff:a2:5d:51:2d:b5:ce:e0:1b:cc:77:75:
df:67:72:31:25:26:38:7c:ba:78:7d:7d:56:09:a5:
61:2f:d3:b1:73:e8:7b:f0:0c:c9:25:8d:49:06:7b:
ab:2d:29:ca:6b:47:01:4a:6d:b4:9d:08:a3:23:f7:
3b:b7:b6:5b:33:53:48:89:66:a4:b6:32:3f:52:0f:
57:86:a4:92:e5:c5:0b:ca:87:25:ea:8f:f0:55:bc:
ae:27:76:69:d4:70:bf:f7:e4:9e:23:c4:9e:79:4d:
fb:ab:08:22:21:72:0e:4d:9e:9b:8d:5a:8b:d3:66:
06:7a:e6:09:06:cf:f6:6d:81:f8:2b:99:3b:f2:3b:
e5:b7:cf:5f:0e:b5:9a:7a:03:64:87:7a:1e:72:b3:
8b:21:05:a2:36:39:8a:81:88:c8:ff:3b:da:01:9e:
a2:0f:0d:48:32:a3:3b:c6:c2:82:1e:aa:43:29:80:
89:27:b7:cb:03:99:a8:28:ba:59:68:91:15:fc:52:
02:ff:be:32:00:df:ee:93:f2:9e:2b:d7:5f:14:36:
b4:ff:b3:eb:2e:36:48:77:fd:a3:5a:77:c6:2d:e1:
63:b4:ac:08:f9:7f:a0:70:56:69:68:ca:10:21:cd:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:98:BA:3C:BB:20:D3:44:98:C0:B2:29:BB:82:5E:56:2A:EE:F9
X509v3 Authority Key Identifier:
keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/72F52C962AF511EA8C989441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.134.0/23
Signature Algorithm: sha256WithRSAEncryption
45:c9:30:bb:a6:75:60:50:af:e5:67:20:48:df:a2:6d:3e:69:
07:af:1a:a6:23:de:2b:c5:2f:23:76:6e:ff:7d:e1:21:2a:1b:
0f:e9:2a:05:40:62:ba:cf:72:81:25:f5:68:05:e5:13:70:47:
2e:c7:26:90:c3:a6:dd:60:b2:73:23:14:cc:53:4b:b7:14:f2:
92:47:64:f2:b4:97:5f:ab:82:a9:67:78:8b:59:29:8e:7b:36:
48:e8:02:98:10:e4:68:31:ab:55:38:ff:87:e4:6e:aa:00:7e:
a9:9e:c0:eb:aa:b3:e6:4d:fc:21:78:bf:0d:0d:e2:22:36:b2:
12:b0:e5:85:c5:a8:89:d3:e3:31:05:9a:74:03:a8:9a:98:a2:
b4:f1:22:a6:f0:64:ab:68:0a:e4:c2:b0:bb:15:ac:96:34:ab:
35:88:ea:b2:07:ca:8b:4f:4f:06:90:b6:50:56:77:c0:90:f5:
91:c7:5b:d5:ae:f5:31:80:b1:d6:43:7b:f1:f7:ca:43:d8:98:
33:e0:b1:74:1f:a5:4f:a6:45:a2:d4:ae:8a:50:79:b7:08:bf:
12:6a:72:c2:b4:4b:58:5c:8d:53:4c:12:2f:ef:5a:07:81:83:
b9:0c:91:d8:f8:94:ad:18:9c:1a:3b:8e:0b:8c:83:23:e2:d0:
72:db:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:21 2025 by rpki-client