Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa
File: 1B120B6E563B11EE9C93E334C4F9AE02.roa (raw, json)
Hash identifier: VUfYYGUfVgXIhkgz5s5HyLNUsWHidDwIj7X1Pl5aTe4=
Subject key identifier: FE:FB:5E:0F:21:6C:1F:58:B2:E6:E1:71:77:51:42:85:2F:EC:80:A0
Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial: 0552
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa
Signing time: Wed 03 Apr 2024 01:03:50 +0000
ROA not before: Wed 03 Apr 2024 01:03:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18464
IP address blocks: 103.136.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E80
Validity
Not Before: Apr 3 01:03:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660caaf6-f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:56:21:d6:38:fd:a1:2c:5f:0c:cf:04:f3:
db:2e:2e:f8:95:1e:63:7b:d7:85:49:4b:55:a1:0b:
ad:96:9f:43:c3:80:af:40:e6:f6:20:28:ee:c4:a4:
2e:af:8d:ad:93:be:3c:6f:37:95:bd:0b:be:e7:a5:
65:6f:86:29:ed:4f:cd:59:65:b0:0b:bb:97:f4:f4:
54:29:37:42:95:9e:01:25:9c:8f:b2:3b:33:a4:f6:
85:eb:c5:29:e3:2d:c0:ed:8f:e7:ef:66:52:23:3d:
0c:ee:9a:ce:d9:f9:45:11:d1:03:93:23:fa:d7:20:
b1:d8:95:49:d5:aa:c9:88:0f:18:af:a4:65:27:bb:
f5:89:f6:36:39:46:8e:44:4e:3e:f4:d0:4f:83:9a:
65:36:42:85:91:be:65:37:89:79:01:b3:43:e6:2b:
02:94:cf:04:40:e7:2b:cb:61:e5:5b:f4:f7:23:76:
c0:30:e4:6d:ae:ce:c4:6f:9c:9a:e4:b2:01:94:d7:
83:65:2b:36:30:75:1e:3e:da:32:34:3e:ed:de:23:
7e:da:a6:b6:2d:35:53:68:03:30:bc:d7:9d:d5:47:
54:86:7f:d9:c7:dd:21:33:44:31:a9:0a:ab:2f:70:
17:ff:d8:b9:aa:61:4c:a0:41:ca:8b:93:11:a4:7a:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:5E:0F:21:6C:1F:58:B2:E6:E1:71:77:51:42:85:2F:EC:80:A0
X509v3 Authority Key Identifier:
keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
03:56:59:80:18:ec:40:a1:d7:b8:f1:b2:28:a2:eb:98:d8:15:
08:99:41:3c:d6:17:1a:0d:2e:95:a5:1b:9d:94:23:cc:17:ba:
cd:56:67:b9:93:3c:33:12:24:65:25:df:11:11:7e:af:70:ff:
11:c8:12:09:78:57:f4:1d:27:8d:a4:9e:af:56:29:d6:9f:b9:
ae:93:23:5e:2d:3a:f6:14:5c:56:10:8b:5f:37:06:00:f8:03:
60:f8:dd:5c:c4:7b:e3:00:a8:2c:40:c5:e6:65:19:7c:3d:66:
91:fe:4e:78:e8:52:4b:14:d4:fb:18:e2:6a:9d:85:04:fe:17:
5a:e1:93:b4:7d:2b:da:2a:fd:df:01:02:12:c4:9f:9a:2f:3f:
60:d7:6b:95:67:76:1b:c9:a3:a5:37:00:3c:96:ad:60:30:46:
3d:0b:df:ae:bb:33:14:d5:7f:5e:97:e3:03:e6:87:90:67:8f:
b2:d8:d4:bd:55:f7:ef:e7:42:4f:e9:67:f3:93:e8:c4:59:b3:
0f:a9:f6:4b:9b:6b:c1:d4:a0:29:7e:c2:c4:e6:82:ce:9b:c3:
01:33:2d:72:24:bf:be:c4:64:ed:88:93:aa:11:05:c1:b6:13:
0a:ca:6b:78:4a:85:c6:af:4e:9e:9c:1d:5f:3a:55:b3:ed:d7:
f3:82:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:25 2025 by rpki-client