Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
File: BED97520B1D911EA912C632EC4F9AE02.roa (raw, json)
Hash identifier: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=
Subject key identifier: 7F:36:9F:BF:EB:4D:F1:45:D1:0F:81:8D:16:D0:59:9A:F9:F8:7F:6A
Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial: 0852
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
Signing time: Tue 24 Sep 2024 20:49:21 +0000
ROA not before: Tue 24 Sep 2024 20:49:21 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133048
IP address blocks: 103.240.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Validity
Not Before: Sep 24 20:49:21 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f325d0-a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:0a:da:bf:bf:31:6a:9a:17:e6:9e:90:1b:
c2:53:2d:d1:e0:9f:a5:06:6a:13:82:71:6b:d0:57:
f8:47:c8:3d:d7:80:b1:22:de:50:ee:93:e0:04:54:
22:d0:7a:c6:6a:b4:a1:4b:a0:52:a5:11:6d:6e:82:
24:dc:0d:60:fb:34:c4:61:d6:f6:a8:33:85:d0:b6:
e5:cc:ad:e6:a3:d5:a7:b4:ee:37:8b:14:b1:2f:8c:
36:cf:d9:96:ee:4d:17:05:8d:93:4b:59:3a:5e:ee:
8c:72:49:61:02:6b:7b:1a:39:92:6e:9a:fd:ed:a7:
62:07:36:8a:f0:bd:03:07:5c:76:34:49:54:30:19:
45:38:18:ee:40:8f:f3:e1:4c:bd:be:cb:02:65:8d:
90:bf:a3:e0:bf:82:86:2e:3b:a5:a1:57:dd:3c:d9:
8d:16:fa:e6:8d:49:7f:06:53:20:e3:97:4d:6b:9d:
e5:ce:1d:f6:15:a2:ce:a6:4b:8e:0a:fa:fb:52:26:
d6:d5:1d:c5:97:4c:f8:e7:2f:93:c9:ff:c7:cc:78:
92:69:49:a0:39:d7:d5:c3:64:a9:f6:4b:d4:d9:b2:
ff:ec:9f:47:e3:e9:4b:4f:75:e0:3b:d3:76:6f:7e:
f5:4e:b0:2f:86:ae:d3:18:48:8c:72:81:fa:3a:07:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:9F:BF:EB:4D:F1:45:D1:0F:81:8D:16:D0:59:9A:F9:F8:7F:6A
X509v3 Authority Key Identifier:
keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/BED97520B1D911EA912C632EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b7:41:c1:69:ef:20:52:53:90:5c:e0:2b:89:80:d3:70:54:
3e:2b:52:28:15:be:ad:d0:fa:01:c8:94:6f:57:ef:1e:2c:e7:
14:d8:a0:56:1c:0d:d6:78:29:cc:b1:3e:b5:03:18:29:42:90:
d6:d0:16:97:40:83:bd:7a:4d:c7:1b:6d:1f:2d:0c:9d:69:c0:
ea:e8:fa:ed:d7:be:ef:aa:d7:f6:a6:e4:b8:f1:bd:5d:b9:09:
8e:27:c3:f3:45:f5:94:53:ae:40:9f:96:1c:e4:45:92:d5:29:
41:09:93:7b:96:81:25:b4:7a:a4:e0:6c:49:96:ce:2c:ac:78:
57:d5:6b:ff:e4:63:98:58:f2:e9:fb:47:80:1c:7f:4a:fa:db:
21:c8:c3:35:82:e1:e4:ef:a9:22:f4:29:1a:fd:bb:4b:21:19:
b0:a1:10:02:ed:c8:fa:cd:a6:0a:bd:f4:6b:f8:db:82:96:96:
91:50:78:3e:26:ed:a1:ea:cb:2b:44:fe:04:e8:c2:dd:d9:0a:
8e:3a:cb:45:20:0f:89:a3:98:7c:f4:71:ee:74:47:d1:00:02:
0f:8a:83:5a:5d:05:94:01:16:5b:12:11:00:1e:3b:e4:31:58:
ba:99:6b:ac:d7:1d:eb:79:d2:fb:33:39:d2:a9:88:9e:15:b3:
17:55:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:58:04 2025 by rpki-client