Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
File: 8D3981D8E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=
Subject key identifier: 32:10:C0:AF:29:A5:DB:B4:49:94:C6:EA:BA:50:09:69:D1:84:16:18
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1CB8
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
Signing time: Thu 02 Jan 2025 16:13:38 +0000
ROA not before: Thu 02 Jan 2025 16:13:38 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.81.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7352 (0x1cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Jan 2 16:13:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6776bb32-ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:17:39:9b:42:be:10:80:c8:bc:64:54:91:
95:56:9f:1c:0f:52:04:77:a9:c8:3d:8d:9b:53:fb:
cc:4c:95:1b:ea:ef:32:19:21:47:ff:54:36:4e:50:
27:d1:89:6f:2c:b6:64:7f:08:3f:f3:17:a1:0a:bf:
33:9a:e2:cc:44:71:9b:3c:47:e8:2c:92:61:38:42:
2b:7f:d1:50:26:26:ed:cf:d2:07:02:6a:09:db:6f:
c5:96:43:77:16:29:3a:1e:20:06:77:a8:23:2f:61:
f2:8d:c0:84:3b:ba:e1:a7:f6:51:81:10:49:10:eb:
0b:2e:e6:09:00:42:56:03:70:0e:b3:d8:4a:98:e9:
40:6d:bb:0a:ef:0d:00:58:25:44:3e:db:fa:1c:8d:
4e:fb:3c:9c:d8:9c:95:ed:d1:bc:24:d7:42:25:a8:
78:a4:f6:bf:20:be:8b:64:50:12:36:9c:c4:2c:04:
31:ee:35:43:ea:bc:7f:a1:a5:1e:45:ac:a6:be:a4:
9a:a0:51:fe:a7:dc:99:99:d9:88:8d:a1:7e:db:2a:
9e:47:58:09:96:79:31:78:fc:64:e6:82:b6:8d:04:
a0:a4:50:d6:8d:6f:fb:14:ad:23:05:9f:6a:da:b7:
fc:5e:d2:9b:3f:87:14:cf:1d:74:8c:55:53:c5:6a:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:C0:AF:29:A5:DB:B4:49:94:C6:EA:BA:50:09:69:D1:84:16:18
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.52.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d4:84:11:e4:dc:67:cc:fc:32:55:ba:53:76:fe:22:a6:7f:
dd:92:4a:49:e3:d6:b7:ae:ba:37:fc:1a:d2:8e:0a:60:d0:ed:
bd:d7:26:e0:4d:4a:ab:34:79:56:13:f9:f1:d8:b2:4c:9b:c0:
c4:8d:c1:e0:f6:8f:55:d7:b5:37:10:f0:8b:26:1a:43:d3:b1:
4e:79:78:26:dc:55:23:d5:ce:27:b1:61:31:60:31:05:6e:51:
fa:78:f2:b7:c5:6c:50:87:1e:78:ff:32:0d:5f:79:cb:75:08:
4e:9a:ad:05:98:61:65:9a:c9:b4:48:d0:1e:f1:15:53:5a:7a:
c4:74:ad:8b:71:a8:5a:8e:b4:8d:ff:07:d8:ae:a6:bc:cd:9b:
7d:eb:20:f0:f6:3a:d6:07:fa:7a:16:24:54:5a:43:d8:ac:7c:
57:4d:be:ba:32:61:be:cd:e0:af:a5:a7:bb:e5:6d:d8:42:1d:
a5:d3:2f:3c:09:de:ca:d0:fd:05:5a:46:60:83:04:ef:a2:02:
9b:af:f1:c8:a6:30:bb:f1:ce:b7:50:8e:8e:31:34:ad:7b:a8:
34:1a:92:59:35:56:c9:be:a1:fa:e4:f2:4a:ce:a3:96:d3:61:
48:da:b1:a6:22:c8:e4:2e:59:6f:fa:f9:95:01:66:8b:8d:ba:
18:ac:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:35:39 2025 by rpki-client