Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E704778D3BB11EF80C3AF80C4F9AE02.roa
File: 5E704778D3BB11EF80C3AF80C4F9AE02.roa (raw, json)
Hash identifier: WfTmxaivmFhz6/wE+Yt7i1CdrY1yqt3UCmzbsgRtA9E=
Subject key identifier: 5F:42:30:10:30:85:EA:A0:38:5C:45:EB:E5:87:E6:EA:C2:95:50:A3
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 03
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E704778D3BB11EF80C3AF80C4F9AE02.roa
Signing time: Thu 16 Jan 2025 03:38:37 +0000
ROA not before: Thu 16 Jan 2025 03:38:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.49.42.0/24 maxlen: 24
103.49.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jan 16 03:38:37 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67887f3d-4c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:c1:9b:e6:6a:d9:66:7a:97:7a:aa:b5:df:
5a:eb:7a:ae:da:e8:55:6e:21:21:fc:a2:62:79:e5:
78:a5:1f:29:06:c0:35:d1:b4:64:87:7a:27:37:a9:
7a:bf:cb:a6:5d:4a:94:6a:2e:56:d3:b0:c1:d0:49:
4f:04:f4:4e:d5:68:be:57:57:2a:28:4e:a8:da:57:
63:6f:7d:d5:25:18:fb:0b:1e:74:47:cd:6b:c0:f4:
a8:35:4e:91:bc:4e:e9:33:ea:d3:e7:5e:b2:40:20:
5a:d1:77:e9:2c:d6:0d:53:24:fe:8f:b7:c8:f4:dd:
d4:e8:7d:2c:cf:e2:b2:49:50:29:a5:e2:47:4c:f8:
30:4a:2e:de:d7:ac:f1:a2:5a:2f:fc:a3:e8:0a:20:
51:f2:59:71:f6:61:d3:2b:aa:d4:06:0d:f4:52:53:
71:1e:ad:45:4b:67:88:db:c2:38:8c:c0:2f:8c:28:
36:83:a9:24:f6:c2:b7:6f:4d:4b:89:88:ce:9a:ef:
dc:01:74:86:8a:c7:11:24:77:90:8c:3b:59:cb:83:
78:1e:29:eb:c7:78:14:ce:b9:a6:d9:84:82:2b:da:
8a:dd:e0:89:0f:5a:2b:5f:1c:2e:90:0a:ce:35:53:
a3:70:63:93:aa:2a:d7:0a:24:a2:56:c1:c9:0d:aa:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:30:10:30:85:EA:A0:38:5C:45:EB:E5:87:E6:EA:C2:95:50:A3
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E704778D3BB11EF80C3AF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:e9:36:57:48:14:c9:a9:6c:bb:bd:51:c4:d0:1b:80:90:0b:
f7:21:60:fe:1d:0a:62:e2:6e:c4:de:64:37:05:a4:d2:23:e8:
1d:0a:1b:53:72:36:b4:95:80:5c:c3:f2:1b:5d:c0:ce:fb:53:
d3:7f:05:91:9e:01:a4:79:58:83:6a:ee:67:e3:81:20:21:7b:
2c:b8:8c:2e:2b:49:ad:3b:32:00:c4:d7:5b:9f:c1:b2:c7:be:
aa:a7:5c:26:03:99:18:6a:0b:51:79:5b:39:5d:46:e9:fd:42:
9c:9c:2a:d8:30:62:b6:05:a6:3c:a8:f1:bc:ec:50:d6:0b:c7:
b2:d6:5e:3e:03:6b:9c:8e:07:76:a6:ae:c6:bb:ff:5e:d3:b7:
66:fd:4c:e3:19:ad:8d:b5:68:78:83:5a:1c:48:dc:ab:db:b1:
d2:83:73:05:8f:75:d9:00:63:22:b2:40:53:ed:c5:f1:7e:5e:
c4:d8:6e:3d:ab:4d:de:01:20:11:a9:f1:1e:82:a1:5a:fd:c0:
7c:e3:60:de:4b:9a:4c:7d:52:09:c7:9f:65:90:3a:3d:3b:0f:
eb:6a:9d:a7:66:1e:86:0b:fb:77:87:23:03:bc:c1:2a:6c:18:
3a:7a:4c:ae:f5:bb:32:2a:96:07:8a:9f:9b:c5:c3:33:e5:84:
ad:a3:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:16 2025 by rpki-client