Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
File: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (raw, json)
Hash identifier: xN0yNaxvlpy2+KQ9qQxtfIWfCyAMMfjKaJ5DUH0Cm+A=
Subject key identifier: 82:DD:FB:47:98:F0:CD:F3:01:97:10:34:67:D9:E8:16:B9:8B:1A:A0
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 0700
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
Signing time: Mon 02 Sep 2024 08:51:32 +0000
ROA not before: Mon 02 Sep 2024 08:51:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140586
IP address blocks: 103.82.230.0/24 maxlen: 24
103.82.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Sep 2 08:51:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66d57c94-c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:6e:13:af:d0:e4:c1:34:40:34:82:35:6e:
72:c6:cd:39:66:15:5d:c1:36:56:74:36:e3:1f:cf:
ce:5b:c4:75:aa:b0:f2:2b:85:6b:24:d1:3f:d5:47:
f6:ee:8c:3b:1b:25:fd:55:f7:29:e2:33:c9:48:2b:
ef:de:d2:26:2d:30:e2:1a:18:8e:fc:78:b9:cf:73:
30:cc:fa:6a:1d:54:91:76:97:0d:93:25:fc:cc:64:
95:23:1e:7e:92:23:6a:43:fc:cc:17:60:41:e6:38:
89:40:6c:e8:6a:fb:e6:a1:f2:de:fb:e5:2a:bf:a9:
a4:bf:ee:7e:86:04:c6:d4:f8:61:a8:f8:92:4b:a9:
69:ae:07:9e:2d:f9:68:e0:66:a9:8a:ea:43:09:c2:
d9:e9:de:be:fb:d4:f6:8a:04:78:cc:da:a3:66:21:
6b:e1:eb:9e:e2:fb:cc:cc:77:51:be:2d:b9:81:f8:
55:2f:e7:bd:ce:6a:34:0a:24:e4:c7:69:87:e7:73:
d0:05:55:79:0e:08:56:7f:0c:b2:c6:34:0f:3d:be:
31:be:ae:c6:ce:d1:ff:a0:38:93:63:35:92:9d:0f:
f9:3c:46:79:fc:08:0e:af:59:1a:1a:82:93:c6:2e:
72:79:12:64:ae:b4:3f:14:14:25:14:3b:6c:60:2e:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:FB:47:98:F0:CD:F3:01:97:10:34:67:D9:E8:16:B9:8B:1A:A0
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.230.0/23
Signature Algorithm: sha256WithRSAEncryption
50:04:aa:18:50:e0:63:0f:36:f1:6a:0e:76:e4:76:28:12:fb:
62:e7:76:8e:f7:79:88:68:1d:15:1a:98:e7:3f:18:2a:b3:fa:
eb:53:1f:6b:b4:0b:42:ff:6c:84:c8:2e:66:07:63:59:a7:d3:
e4:14:1a:59:2c:13:eb:b8:a5:f1:57:2b:9a:31:0d:a3:0b:9e:
11:e2:dc:2b:ab:ed:d4:0b:52:72:3d:ee:88:42:41:f3:ac:c3:
c4:8d:5a:a3:9a:34:e3:a7:d3:63:16:82:57:a6:83:80:af:41:
ec:ac:a2:47:ee:af:f9:5e:b9:2b:7f:01:60:a5:26:77:64:ec:
d0:00:b2:f3:75:fc:88:70:8b:bc:05:78:37:e2:0e:ef:ec:e9:
cd:83:3c:a9:7a:2d:cd:75:d0:ca:db:8e:0b:cf:70:c5:ce:4a:
78:89:62:62:57:87:d2:92:64:11:72:e1:aa:db:f4:57:b8:79:
46:ff:69:f2:5b:f3:b0:b0:45:d9:f2:7a:d3:c9:81:ab:59:d4:
a1:78:34:07:9b:9f:a8:b3:6a:c5:7f:b9:f8:97:d4:38:ae:46:
ef:34:53:ea:80:bc:ef:56:30:d9:50:ad:99:92:19:a7:52:72:
96:84:1e:d4:10:83:0c:f1:14:9c:8b:39:c0:0e:c1:8c:e8:f4:
25:88:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:09:36 2025 by rpki-client