Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
File: B24758AE772311EFA5510A63C4F9AE02.roa (raw, json)
Hash identifier: 46Rei/bZZJIVATTcdxCQjd0v0xlUhPPipw2D8+sS4KM=
Subject key identifier: 3F:55:47:E3:48:96:DD:C7:4F:EB:D3:24:0D:63:26:B0:C8:21:6A:6A
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 013F
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
Signing time: Fri 20 Sep 2024 07:46:21 +0000
ROA not before: Fri 20 Sep 2024 07:46:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 10225
IP address blocks: 103.182.210.0/23 maxlen: 23
103.182.210.0/24 maxlen: 24
103.182.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Validity
Not Before: Sep 20 07:46:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66ed284c-263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:07:d1:04:3e:48:24:64:87:c8:ef:72:6e:
c1:c7:90:e4:9f:87:01:c6:fa:b9:8e:9c:94:72:f5:
23:94:e2:4c:95:32:ad:cf:80:50:5a:4a:a7:fa:6d:
a0:4c:f5:38:49:44:ce:d6:67:99:21:bf:7c:82:a6:
4a:8f:fd:32:bf:78:a2:90:42:23:bd:34:d7:e4:03:
35:80:9e:86:04:4f:90:3e:58:ee:d7:c2:36:dd:78:
39:4a:fd:7b:d2:93:37:df:1f:fb:54:f1:27:d0:2a:
31:19:b1:01:09:d5:40:0d:29:e9:9c:3c:db:8a:5b:
83:b8:08:93:64:a7:29:8d:b4:74:e3:ed:61:7b:10:
13:cb:40:5c:9f:6f:2d:91:2c:e6:3a:07:57:52:e8:
b1:7b:9a:54:09:bd:c1:7c:41:7d:09:d1:43:60:3a:
70:58:b6:28:f8:e3:fa:45:e5:3d:3d:23:c4:33:b0:
26:a2:ee:a6:54:fc:93:22:45:24:69:7e:f1:f4:d7:
bc:fa:0e:55:71:aa:a7:0b:ec:15:fe:75:70:b9:f1:
19:19:fd:d1:2e:d6:fd:cc:ea:a8:70:d2:15:27:1d:
6e:14:69:0c:d8:82:cf:7c:0c:1a:f5:ed:e3:07:5a:
4f:6d:a1:18:14:f9:02:ff:05:93:c0:70:4c:61:8e:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:47:E3:48:96:DD:C7:4F:EB:D3:24:0D:63:26:B0:C8:21:6A:6A
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.210.0/23
Signature Algorithm: sha256WithRSAEncryption
58:6a:5c:1d:45:70:18:6a:81:27:53:da:99:0a:33:71:30:e1:
47:1d:70:71:ee:df:6d:b5:fa:ff:7b:90:5d:53:da:ca:3f:53:
2a:78:c9:8b:5b:62:b4:44:58:42:e7:8f:62:3b:b1:ea:11:c3:
9a:50:83:04:12:ca:f2:fd:45:74:5f:64:91:53:87:dc:f3:a9:
cf:5c:99:74:36:96:1e:f4:92:57:de:03:d9:b8:ad:5b:82:68:
91:d5:6a:18:9d:a6:de:6b:2d:30:3d:99:ae:f5:3d:ad:09:84:
2c:7d:d1:7e:e8:19:ea:3f:4c:5b:af:eb:c6:53:ec:4f:84:d2:
7c:4a:7b:4a:b8:f0:39:f7:07:af:83:0f:71:78:72:48:6d:54:
ab:99:e7:11:f4:68:c8:c4:9a:91:e4:5e:b9:56:99:cf:f5:00:
26:23:8f:45:6c:66:1a:8c:f1:19:73:3b:fa:c8:0e:fc:0e:b7:
c8:84:19:42:58:eb:eb:36:7f:44:43:43:7a:6d:25:58:e2:bc:
53:c2:fd:b3:ea:14:94:f7:ba:73:ce:4f:1f:1c:6a:49:4e:aa:
d9:f6:10:76:99:03:c4:5c:37:89:6e:58:49:98:d4:f4:85:42:
c4:f8:bf:84:73:30:83:f9:bc:5c:58:0f:7b:4b:60:20:77:b7:
95:10:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:51 2025 by rpki-client