Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/C2CBAC78EE1711EF9C444D5DC4F9AE02.roa
File: C2CBAC78EE1711EF9C444D5DC4F9AE02.roa (raw, json)
Hash identifier: hRLMHxf5NQYRMgFOPiDkN1lTjwv7s2NJpcHOAv2ymHs=
Subject key identifier: EB:F7:7C:97:E1:CC:AC:62:AF:15:BE:1B:68:0D:7E:0F:70:AE:AE:52
Certificate issuer: /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial: 01B3
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/C2CBAC78EE1711EF9C444D5DC4F9AE02.roa
Signing time: Tue 18 Feb 2025 16:45:29 +0000
ROA not before: Tue 18 Feb 2025 16:45:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 103.136.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FECB, serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Validity
Not Before: Feb 18 16:45:29 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b4b929-d40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:b3:c0:14:89:f8:71:a5:ea:8c:6c:c0:6c:
26:22:93:aa:13:86:cf:17:18:fa:00:65:06:2f:26:
ba:6b:d2:5b:19:a9:2f:fc:a0:cb:90:cd:b7:36:6d:
55:21:ce:c6:e8:31:0c:e0:95:10:01:91:32:4a:ec:
bb:ea:56:f2:0d:bb:c3:81:86:21:ad:f8:da:1f:90:
c2:a1:72:ab:de:7c:b3:5d:fc:70:b0:55:50:86:98:
15:1e:f0:0a:be:76:20:39:74:33:a8:b1:e9:00:b5:
34:fa:a7:6e:21:df:df:36:01:c1:92:41:d4:ee:8e:
72:24:6b:d8:73:04:d4:29:5a:a2:37:98:39:49:b7:
8a:3a:22:18:25:fd:33:cb:40:f4:07:1b:aa:9b:8f:
68:c3:1f:34:8d:82:57:48:73:91:aa:9c:02:91:7d:
fd:39:17:2b:9c:9e:7c:e0:59:e1:61:9d:97:96:a5:
60:01:36:3d:8a:f4:24:0a:29:b6:c5:ba:3d:49:b4:
9a:43:89:1b:a2:6e:1d:c4:07:52:ee:e9:e4:95:dc:
84:96:62:c3:5b:1b:c7:15:17:e5:62:7f:10:97:ad:
d6:e2:3d:0d:25:e8:bb:86:fc:d7:08:c4:a0:6a:63:
a9:84:89:e1:58:3f:4c:ef:a7:17:97:9d:24:11:ae:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:7C:97:E1:CC:AC:62:AF:15:BE:1B:68:0D:7E:0F:70:AE:AE:52
X509v3 Authority Key Identifier:
keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/C2CBAC78EE1711EF9C444D5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.68.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4d:1e:8a:5e:4e:a0:cf:77:4c:7e:71:c4:b3:7e:66:db:6c:
f0:07:53:96:15:4d:7f:8f:88:41:70:eb:60:fa:e6:97:9c:d1:
cb:57:0a:21:d6:19:9e:8a:32:cf:bc:00:9b:9e:9f:5f:53:11:
c6:f6:e5:6b:bf:7a:b9:97:08:c8:3e:b3:86:aa:b7:dc:a6:b2:
02:c4:07:30:67:49:5d:e2:15:37:94:05:16:f4:73:8a:87:15:
c9:fc:c8:26:c6:d0:ea:ff:9a:d1:f3:e5:d3:92:29:d0:08:ec:
58:1a:5a:8d:98:39:d9:d2:e8:f0:b5:6f:dd:0c:65:b8:8f:18:
5f:fe:d4:b6:00:c6:89:98:8f:0c:69:a5:bd:a5:82:91:6c:89:
72:ab:57:24:01:94:96:fe:f8:1e:9e:7f:07:a6:90:8d:e2:a8:
00:59:7b:2b:ad:aa:40:9b:3e:6d:9e:6b:ad:cb:63:9d:ef:08:
5d:d2:a6:77:1c:af:6d:cb:f8:9f:c3:f0:f8:03:c8:72:e3:60:
23:55:a3:16:d6:31:80:e1:75:8a:45:b2:34:58:67:7b:20:55:
86:a2:9a:d6:cf:04:79:7b:fa:81:6b:56:d0:13:56:29:55:3f:
c2:90:7a:61:56:d0:15:15:cb:6d:96:8b:b9:47:64:17:28:2d:
df:77:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:18:26 2025 by rpki-client