Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
File: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (raw, json)
Hash identifier: BaABEEJUMzOwQ3XJ4WXo+v7cM/zbzd2LSNgZ3M14nRc=
Subject key identifier: 2C:72:43:12:B8:DB:C5:77:78:DA:07:98:EF:24:14:3B:CE:97:9A:DC
Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial: 02BE
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
Signing time: Fri 05 Apr 2024 04:05:42 +0000
ROA not before: Fri 05 Apr 2024 04:05:42 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 396073
IP address blocks: 103.182.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Validity
Not Before: Apr 5 04:05:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660f7896-feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:6e:a4:a9:7e:35:8c:5e:bf:b5:02:aa:ec:
bf:6f:95:06:bf:47:63:e7:22:4f:c5:6d:09:75:04:
23:0b:87:9b:d4:a1:5d:4e:0a:86:9c:c4:d2:de:38:
3e:1d:08:a1:ff:a6:40:b5:ec:a3:d2:f4:a2:b7:fa:
2b:4f:a7:f4:cf:5d:dc:dd:8f:04:8e:b5:c5:b7:85:
98:6b:1e:46:2b:b2:c2:a1:88:ad:5f:f2:df:3d:ac:
81:eb:31:33:20:cd:c5:a2:a2:f1:86:6b:99:c6:1c:
88:7b:cc:bd:2c:32:0d:68:cc:79:31:b8:c7:a2:84:
8a:e2:ec:96:2a:4d:d2:23:e4:8f:11:0c:b4:b5:bd:
28:12:ac:73:ce:e4:39:02:81:5e:7b:62:35:cc:ea:
4c:a7:a7:8f:a4:9d:03:1a:b3:b7:de:fd:b8:21:fc:
f8:84:bd:17:26:10:44:f6:b7:ac:b8:40:f3:be:4d:
8d:90:db:18:9b:55:f4:39:10:4c:c2:38:4e:27:5c:
b1:b8:44:ff:c3:c1:8a:17:43:00:f5:d0:90:21:e7:
ce:cd:71:67:55:c0:ec:8a:5e:43:14:24:94:7b:1a:
40:99:c8:ec:f3:b6:91:c0:5b:a3:09:4e:7b:3d:0e:
d6:e9:c0:c5:62:32:67:31:6f:34:91:f8:08:5d:02:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:43:12:B8:DB:C5:77:78:DA:07:98:EF:24:14:3B:CE:97:9A:DC
X509v3 Authority Key Identifier:
keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.97.0/24
Signature Algorithm: sha256WithRSAEncryption
06:27:9e:1f:9f:0e:77:67:6e:51:ee:16:8f:8a:31:5d:3a:e3:
10:13:c5:31:14:a5:d3:22:54:ae:8c:b5:14:bd:25:b8:9c:10:
ea:84:51:5b:7d:d3:f2:a8:5d:e6:c4:b2:e4:a0:50:86:ae:aa:
3b:16:62:1a:fc:f4:cc:e3:68:bd:9e:f8:7c:0f:18:31:f0:a1:
53:a4:0c:21:cc:bd:31:7d:c3:ef:e3:6b:b8:37:72:34:53:e9:
cb:e9:a8:3e:cc:85:2f:08:01:3d:e4:57:70:35:71:dd:17:68:
3c:ef:5e:02:54:69:be:56:af:19:77:65:9d:12:a6:a8:12:f3:
94:8c:2d:3e:02:79:64:21:e3:96:cf:a5:89:dd:a4:32:84:3b:
d9:2c:80:17:4b:1e:39:73:01:b8:a1:a4:82:ed:f7:d0:db:61:
35:ce:33:48:c8:e2:a0:93:b9:d0:ba:df:b9:01:ee:1d:c9:11:
ce:2d:c4:7a:b6:b1:e6:47:3e:2e:a2:ff:bb:81:ca:09:ff:a6:
10:ae:72:99:36:e2:ad:02:59:45:a6:d9:d1:fc:97:b8:99:fc:
2e:6f:17:3b:c5:0b:b8:d8:c8:6e:8a:78:1f:bf:a9:37:c3:26:
22:9e:8b:22:78:af:fb:e0:d3:e6:54:47:16:4f:59:4d:14:85:
63:d7:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:40 2025 by rpki-client