Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/C5C439D63B2B11EEB806E26CC4F9AE02.roa
File: C5C439D63B2B11EEB806E26CC4F9AE02.roa (raw, json)
Hash identifier: pyXT8nlOu5Ghteb7Aq5G47ou0soTIJt4EwDIUzlxjVw=
Subject key identifier: 25:95:2B:0C:AF:A9:19:31:0A:55:82:93:EF:FE:DB:10:55:7F:6A:F2
Certificate issuer: /CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Certificate serial: 217F
Authority key identifier: ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/C5C439D63B2B11EEB806E26CC4F9AE02.roa
Signing time: Tue 15 Aug 2023 05:22:48 +0000
ROA not before: Tue 15 Aug 2023 05:22:48 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139285
IP address blocks: 103.120.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8575 (0x217f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E2E0, serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Validity
Not Before: Aug 15 05:22:48 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64db0ba8-a4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:76:c4:e7:b9:db:e9:43:d7:2d:83:a4:66:
b7:6b:ca:4b:9c:01:5f:a2:0b:49:f8:7c:c1:54:02:
c5:30:b2:35:f7:a7:4a:da:d3:94:43:a3:cf:af:c5:
90:8a:11:79:98:23:e0:f5:99:e7:a9:6e:ef:f2:1d:
c4:1c:ec:43:f4:41:ca:f4:cc:51:52:b3:60:23:ea:
0b:6d:5a:f2:a5:5b:7e:1f:f9:6a:da:21:6d:ec:8e:
a4:98:6d:b7:70:ec:a8:7e:69:dc:58:bd:06:87:9a:
dc:98:2e:af:e4:74:bc:bd:69:b8:81:2c:c3:0b:27:
29:f1:de:8f:4f:c2:f4:0c:a9:14:52:f6:5c:a8:c4:
cf:e2:07:06:13:59:53:dc:6b:6b:58:7a:8f:86:37:
ca:19:27:67:c3:1e:f4:d7:c3:ed:a9:2d:9a:cd:31:
6b:87:66:fe:d7:7b:24:4e:46:4b:87:b9:eb:90:f0:
f4:53:65:db:c0:f7:21:10:06:ce:e2:ed:56:c3:76:
3a:98:d5:48:f1:bd:cd:f0:35:72:82:ed:51:93:5a:
9a:20:46:bd:52:b4:96:e2:8b:0b:49:f1:b9:ad:04:
91:8c:50:b8:12:6a:e4:33:bd:5a:ea:33:79:44:15:
05:5c:08:6a:85:18:3d:e5:6a:fa:98:a5:f4:b2:e7:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:2B:0C:AF:A9:19:31:0A:55:82:93:EF:FE:DB:10:55:7F:6A:F2
X509v3 Authority Key Identifier:
keyid:ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/C5C439D63B2B11EEB806E26CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.123.0/24
Signature Algorithm: sha256WithRSAEncryption
56:54:12:d0:81:a1:4a:b0:de:c6:28:37:82:ae:8e:07:e0:6f:
61:fd:62:42:7b:0f:6d:d7:e1:83:f4:c7:5a:e8:94:e5:ce:f6:
4b:94:45:1c:03:3a:a6:2b:8b:b8:58:43:e5:0a:8d:c6:89:b9:
c5:d6:c0:4d:83:98:fa:ef:38:eb:1d:d6:7b:40:2a:e4:72:15:
30:d9:54:40:29:e2:9f:94:f9:5a:99:3e:43:59:7a:ac:4c:df:
ad:58:e8:45:ed:21:36:9e:d7:6e:c5:6a:a3:14:77:56:72:e7:
1b:bb:c3:16:61:bf:77:b4:55:7b:67:fe:62:21:77:da:38:48:
68:20:05:bd:ae:ec:29:52:73:da:5e:7a:09:ac:44:92:81:09:
3b:ec:86:37:ca:d0:cc:d6:0e:b4:e8:11:5e:b8:91:43:95:9f:
a7:48:2e:d1:8c:2a:fe:23:d8:a0:db:eb:45:25:b7:f3:70:76:
63:c9:38:23:2f:9a:18:0f:91:3a:ba:62:de:b0:58:e1:02:a4:
03:9d:eb:68:d5:1b:e1:e6:cf:37:ec:d8:5a:5b:69:21:2d:8b:
27:0a:b6:6a:d0:6a:a2:78:84:83:19:2e:b9:90:91:21:10:6a:
fe:fc:c5:de:a1:2e:f6:70:7c:ab:6c:fb:3b:bc:aa:47:16:86:
62:62:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:21:51 2025 by rpki-client