Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
File: 7338235CC06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier: +T2v6WhZdH2sLvXuddpzzbP1mbQkpp/cDFsDzaIq7rg=
Subject key identifier: 51:7A:A8:70:E1:81:C5:C7:39:E2:24:00:8A:CC:18:C2:1C:A7:F0:CC
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 14C5
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
Signing time: Wed 08 Jan 2025 17:05:13 +0000
ROA not before: Wed 08 Jan 2025 17:05:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 135106
IP address blocks: 103.209.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5317 (0x14c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Jan 8 17:05:13 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=677eb049-4091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:aa:ea:a6:1d:c6:e8:66:39:5a:13:38:16:
22:98:86:c5:70:ab:6b:c0:8f:cb:bd:86:91:55:1b:
52:60:3a:86:fb:f9:78:bc:a8:fc:d1:df:84:21:2f:
40:f2:74:6f:32:e8:a3:b0:2a:32:be:91:75:b5:04:
14:9a:58:73:24:81:83:31:7e:5b:3e:92:5d:54:ca:
7d:3a:b5:6f:30:c8:ac:f2:55:45:4d:83:4a:79:b3:
57:32:9f:11:26:b8:27:a9:5d:ae:97:d1:8c:68:e2:
a2:28:13:f0:5a:53:c8:40:eb:95:f7:e4:91:09:95:
9b:b5:4c:3a:ec:51:e5:f0:ff:f4:33:ca:1a:2a:92:
ec:13:de:1c:76:46:4a:1f:b7:3c:fa:91:79:0f:05:
71:59:bf:bb:d7:eb:2a:c5:62:8d:3d:c9:cf:e7:e7:
94:56:71:75:42:f6:60:8b:e5:ef:6d:c6:5c:d0:a7:
b8:a3:34:da:c9:a1:9b:61:85:1d:f7:c7:93:9e:c0:
93:39:14:d9:6a:a3:78:a3:82:f7:1d:a5:bc:fb:e2:
f4:21:e0:97:8e:83:bf:a2:b4:19:db:59:20:b5:b8:
0e:05:86:6c:a2:42:9b:4d:d4:b8:f1:9d:f2:d3:44:
a5:30:64:ec:fc:be:f3:06:4a:63:69:9a:c8:67:13:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:A8:70:E1:81:C5:C7:39:E2:24:00:8A:CC:18:C2:1C:A7:F0:CC
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:35:b2:12:3d:11:0d:cb:12:11:96:b1:90:76:b7:45:16:17:
21:f2:f9:54:1f:9b:df:cc:d8:26:3e:28:34:bf:bc:39:1e:8d:
a1:c1:69:12:9e:ac:1c:6d:4b:b9:42:01:7b:e7:2b:ff:cc:3a:
3b:97:12:79:22:f4:ee:f8:0a:29:db:ab:8a:c6:de:55:57:f0:
2d:b4:0c:57:87:42:91:1a:6f:54:f9:e2:d7:d2:3e:69:3a:98:
4a:39:77:80:c1:03:1d:72:fe:14:98:24:b1:25:b3:c7:cf:21:
85:29:11:86:7c:e4:4c:c4:f3:d0:15:09:b8:b6:cb:bc:3a:82:
69:3e:70:12:f6:ff:5a:c6:20:7b:83:3c:20:41:89:a7:49:92:
c0:08:c0:23:f0:8d:af:70:c2:8e:86:37:1b:6b:24:81:83:54:
32:cf:d1:e1:d1:98:83:7b:d9:b4:de:46:6c:db:e9:c5:13:34:
52:e0:2f:69:01:f2:2a:d5:a3:1e:4f:4d:d0:c7:9a:58:02:86:
b0:0d:d3:4a:d8:32:1d:e1:ba:1b:df:dd:2a:a8:93:f8:6a:ff:
a9:fd:be:e8:81:cd:06:5a:92:89:5c:53:61:72:05:4f:35:94:
3a:2d:2b:17:78:4f:9f:e8:f9:3e:51:12:01:39:52:1e:3f:fd:
00:61:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:33 2025 by rpki-client