Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
File: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (raw, json)
Hash identifier: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=
Subject key identifier: 40:89:DD:47:43:FD:7E:DD:9D:63:0C:05:3D:5D:45:AC:01:D6:FB:5E
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0C4E
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
Signing time: Fri 14 Mar 2025 19:19:05 +0000
ROA not before: Fri 14 Mar 2025 19:19:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 201133
IP address blocks: 103.155.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08
Validity
Not Before: Mar 14 19:19:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d48128-9b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:81:b8:b2:66:5f:ce:28:46:5b:c5:84:e3:
61:20:80:31:80:2f:bf:97:c0:81:df:38:b1:20:69:
59:87:71:7b:c5:51:7f:31:c3:b3:ab:7a:c0:aa:c3:
82:1f:10:03:38:be:4c:f2:75:f1:26:31:22:33:4b:
dd:71:a5:03:bc:2a:8c:e5:6e:d9:ff:d1:cc:93:10:
c4:7c:57:c0:0a:f1:d3:42:e9:f6:f8:8c:5c:59:f1:
11:5c:12:de:5f:ba:6f:f4:21:1a:66:9e:3e:b1:22:
5c:6b:28:e8:2d:77:53:da:f9:79:ab:91:35:3f:7b:
ee:3e:29:ca:3f:44:17:6a:f0:1c:e7:b1:ef:9d:72:
d2:a2:fa:48:f7:99:2a:34:ee:05:1f:f6:70:8c:bf:
bf:db:54:01:b4:6b:7d:71:f0:ef:ab:93:2d:6e:c7:
31:ac:5b:e9:54:42:68:ce:04:86:23:fd:d5:3e:f4:
64:0c:d7:51:73:6e:14:c8:ad:d9:f2:3a:35:16:f8:
86:ec:aa:78:cc:45:63:f0:f5:c6:f1:2f:09:c8:64:
dc:37:1a:42:7c:af:f1:1f:b8:b4:6d:3c:fa:00:93:
c8:04:a3:a4:7c:1f:de:cb:4a:f5:ad:cf:90:78:1a:
c9:31:7f:f9:63:bc:2c:d7:53:b3:eb:6c:09:59:65:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:DD:47:43:FD:7E:DD:9D:63:0C:05:3D:5D:45:AC:01:D6:FB:5E
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.92.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9c:a1:33:e6:ab:1b:aa:8f:ab:4c:97:5d:98:a1:b9:5b:cd:
3e:0e:39:58:bf:8f:f7:7d:95:84:d9:f4:a3:ca:e5:d2:d7:18:
e6:ed:65:6c:e3:ee:d7:1e:5e:9f:35:ef:35:1d:e4:9a:f2:ae:
b2:fc:0e:38:53:ec:8d:15:2f:e2:fc:77:61:69:d2:07:dd:b9:
89:8a:c8:17:5b:ab:89:f5:ff:4f:5b:18:a8:ec:d3:fb:50:a1:
e7:9f:ac:ea:78:3e:66:28:0d:ee:38:5a:45:da:10:90:71:bb:
2e:ed:0a:1a:d9:42:a3:d5:98:17:fc:9c:fd:15:9a:88:f7:ec:
6c:76:e4:56:96:65:9c:65:e5:07:88:3b:6f:0b:7f:8d:c8:1a:
a7:c4:0d:ae:85:16:17:16:b2:fa:a8:dd:26:55:f0:38:26:b9:
ad:cb:ee:1c:fe:b0:11:f6:2b:10:3c:63:51:a3:90:c4:6a:fe:
95:c7:a1:dd:9c:3c:d0:87:ea:21:d0:cd:89:f1:c1:c7:af:e9:
7b:66:af:41:8a:09:c6:76:2e:b0:24:f0:2d:ff:d5:14:b0:11:
b7:8b:9d:c1:18:b5:9d:61:d6:3d:1c:d8:bb:97:c0:b0:ee:b3:
37:76:77:b4:0f:ec:e6:cd:ef:87:3e:cc:60:92:5a:f7:34:ed:
db:56:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:34:52 2025 by rpki-client