Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa
File: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (raw, json)
Hash identifier: 0tNehZb1BD4CE6Vi84a0S81niVEh4E09rH1TsmDOfhs=
Subject key identifier: 6C:A9:E0:CE:B6:15:23:D5:91:8D:FD:1D:F1:0A:38:06:5B:D6:D9:E4
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 04
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa
Signing time: Thu 16 Jan 2025 03:38:37 +0000
ROA not before: Thu 16 Jan 2025 03:38:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 60781
IP address blocks: 103.49.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jan 16 03:38:37 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67887f3d-c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:fb:d6:f5:68:07:ba:65:b2:a6:28:4f:9e:
e1:a0:d4:02:9d:d0:64:a7:9f:81:bb:b0:a2:4e:cb:
41:4d:ee:81:7a:c4:82:f0:0f:4f:98:38:21:86:36:
16:e9:05:77:52:d5:2b:2f:9d:2b:45:5a:5a:d2:1a:
2a:f9:11:84:3b:d8:3b:3e:af:cb:8a:13:9e:af:05:
38:ab:db:93:34:f7:f1:84:d8:3e:3e:1d:bf:d1:dd:
60:4f:01:fe:f0:76:ea:b6:67:b5:4d:0b:86:07:f2:
e5:8a:51:e8:94:31:ac:09:d2:28:7b:6f:c4:20:9a:
58:e1:4c:b6:62:ee:ea:e5:c5:54:9d:f1:9a:a1:a3:
26:4b:f6:c1:cd:50:ee:e0:f8:cf:4b:da:cd:2d:5a:
d0:bd:53:a1:2e:e0:19:71:1e:0e:fa:85:ab:c1:9b:
92:3c:4a:32:b3:44:90:71:ae:9f:2c:23:46:80:04:
a9:3f:cb:00:7e:be:6d:72:30:9c:da:93:4b:d8:54:
73:aa:65:fa:96:17:ff:c7:a9:bd:d4:a8:07:92:c2:
75:dc:9d:80:0a:13:48:0e:dd:7a:59:21:02:fa:0d:
94:a0:23:c3:9e:60:cb:17:36:f0:33:4a:97:25:13:
08:ed:27:84:81:57:32:af:1a:7f:03:7a:93:32:9d:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:E0:CE:B6:15:23:D5:91:8D:FD:1D:F1:0A:38:06:5B:D6:D9:E4
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5EDC5882D3BB11EF80C3AF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:74:f5:b7:64:29:62:8a:dd:10:d5:bd:d3:6f:c4:bb:ce:0b:
cc:c2:db:aa:07:2a:7b:5c:53:03:5f:3f:27:65:d1:b2:7f:9a:
d7:ca:e1:07:d3:7c:9c:0b:6d:dd:80:e0:1a:81:bb:00:38:54:
94:06:ed:c4:5a:50:03:20:4d:02:f2:be:ac:f6:02:4f:be:4a:
37:af:c5:4e:5a:bf:8f:3f:fd:13:1d:da:19:b9:99:7a:01:b5:
a2:99:76:00:e3:f6:5e:34:9b:91:5e:bf:ed:16:10:00:68:a5:
ef:5a:66:2a:ed:bd:48:58:c5:c8:42:ad:3a:fa:f6:ed:f9:c8:
9e:7a:e7:30:e1:cf:8d:7d:2d:46:5d:a9:d3:73:da:70:73:42:
80:b1:68:75:6e:3f:29:3a:df:28:1f:ba:05:75:4b:fa:e4:fa:
17:9a:c2:ef:44:a2:74:93:f8:72:3b:54:41:d4:50:f3:b4:56:
66:df:89:30:fb:f1:7c:35:2f:ec:23:78:a8:f5:8d:07:b3:b6:
21:2b:27:86:97:3d:d6:da:97:d9:89:d2:bc:36:12:0c:9e:8e:
f3:6b:a8:82:29:1a:36:79:26:59:36:25:5d:16:27:55:54:5c:
bc:e4:0a:56:16:bc:0f:41:12:0c:65:2c:d0:82:fc:63:36:25:
01:03:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:29 2025 by rpki-client