Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
File: 5181F33CE8C011EDADA54A23C4F9AE02.roa (raw, json)
Hash identifier: 9wRwgsGB8Fy9z1Xq7bw5sLUsMsE1FSTZuA/DyllyXak=
Subject key identifier: B8:D6:17:49:A6:33:C0:30:B9:C9:94:53:58:F3:B3:77:A0:C2:90:2C
Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Certificate serial: 012C
Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
Signing time: Fri 29 Nov 2024 03:17:26 +0000
ROA not before: Fri 29 Nov 2024 03:17:26 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135662
IP address blocks: 103.78.108.0/23 maxlen: 24
103.118.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8
Validity
Not Before: Nov 29 03:17:26 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67493246-eff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:b1:44:9e:81:b2:35:28:87:75:05:aa:80:
6b:87:16:be:a2:e4:d9:91:48:ca:ea:ef:3d:e7:d9:
ad:c0:05:1c:5e:fe:7c:61:fa:a0:db:73:8c:3f:bf:
e9:af:58:28:23:e0:1b:e0:2c:be:fa:0d:76:b6:20:
d0:75:81:a7:8d:80:e4:29:77:a2:86:fc:9e:71:40:
58:6b:2a:1d:a5:c1:75:51:d5:2d:95:37:63:3a:6e:
ba:0d:82:d3:6a:1b:be:db:f8:1a:5b:a7:97:33:93:
6c:b7:28:3a:21:e5:db:fb:dd:27:8f:f8:cc:2c:48:
e9:04:8e:f6:25:a2:4f:36:11:0c:2f:e4:94:24:e6:
a4:cb:03:48:68:30:5e:c8:d4:59:cb:48:cc:65:ae:
89:29:26:3d:7d:54:1b:eb:f6:bf:3e:85:13:39:a4:
81:97:4b:44:aa:7b:3d:67:b2:81:2a:87:b7:3d:2f:
37:4b:bf:79:3b:2f:64:83:67:56:25:70:1a:ff:83:
f4:df:35:15:7a:c7:8c:8d:aa:22:36:7a:b0:9e:ba:
52:2e:cb:f5:db:10:0d:6d:10:08:b7:8f:3f:90:85:
f8:42:c6:d7:5f:f4:f7:fb:86:a5:3d:3e:0a:27:00:
08:59:0d:95:f0:2f:43:27:39:df:70:df:0f:88:80:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:17:49:A6:33:C0:30:B9:C9:94:53:58:F3:B3:77:A0:C2:90:2C
X509v3 Authority Key Identifier:
keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/5181F33CE8C011EDADA54A23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.108.0/23
103.118.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b0:3a:1f:f0:8c:be:cd:60:70:d2:83:08:5d:f3:79:1b:0b:
67:a4:71:7c:ce:dc:b3:53:89:fa:f5:63:32:03:5d:42:3d:a2:
25:8a:1c:4b:c2:cc:3d:f6:1b:35:85:d7:e5:a1:26:30:a4:e2:
63:0f:19:de:0b:9f:16:86:6e:27:4c:d1:e1:17:cb:9f:b1:da:
bb:08:78:e8:59:46:99:c5:c7:f3:d0:d1:fd:da:2d:61:cc:09:
d1:c6:d5:c7:d1:b5:9f:ca:18:9d:2a:12:cb:cc:c5:a5:f9:c2:
56:b4:80:47:cc:42:82:dd:8b:83:f6:89:5b:a7:9e:c6:2c:93:
d5:e6:d3:e1:36:6f:46:e9:f8:3b:2f:d0:15:3b:04:b6:8f:ed:
7e:7f:77:7c:09:34:0a:9a:e7:45:80:3e:28:b9:fa:98:cf:55:
2e:de:c0:e4:e8:ba:cd:64:48:dc:ad:0b:ed:35:f3:79:11:8e:
77:75:5b:c4:d2:af:6b:d7:e6:b5:b6:a6:b0:4f:5d:fe:14:5e:
a4:26:aa:27:8c:d4:8d:df:f1:56:95:17:38:41:dc:ff:c2:d6:
fe:16:94:db:26:3b:a4:de:cf:35:d3:08:10:6c:bf:9c:79:52:
f9:a9:49:c5:af:ac:5e:8f:61:13:95:39:ac:d7:94:c3:f8:76:
8d:a9:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:46:03 2025 by rpki-client