Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
File: E5817A58B8BE11ED83994B4AC4F9AE02.roa (raw, json)
Hash identifier: wVHle4DHj+Xgjwwiq8R+NOE0g124bZkko55edUj9vKE=
Subject key identifier: 8C:D6:EC:D0:B5:91:72:A6:EB:D4:06:D8:0D:A9:1F:C8:9D:B3:3B:BF
Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial: C2
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
Signing time: Sun 03 Mar 2024 05:37:46 +0000
ROA not before: Sun 03 Mar 2024 05:37:46 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138572
IP address blocks: 103.80.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Validity
Not Before: Mar 3 05:37:46 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e40caa-2a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:e0:66:d4:38:4d:32:c0:b0:1a:fe:ed:3c:
74:41:f7:52:f4:f6:75:6f:9a:34:66:72:75:12:f3:
bf:ad:76:77:a2:db:db:7a:73:90:6a:7b:02:f9:07:
9e:b4:63:c8:d7:59:4f:ee:db:17:0a:2a:46:16:e0:
63:37:4f:59:4f:29:52:b8:55:12:dd:64:88:ae:d8:
51:6f:6b:8e:45:e0:23:50:fd:65:96:0a:41:e2:de:
80:99:3d:bc:b5:12:07:d4:11:e9:1e:fb:ba:84:1a:
0c:fa:0d:bb:d0:45:fe:72:e1:33:d7:5b:25:df:9e:
11:b3:fb:c8:28:f5:2e:27:fe:fb:46:51:3e:35:ab:
f0:f1:a5:60:68:21:26:96:a2:26:21:0f:7c:63:f1:
12:fd:c6:86:c9:02:00:94:6a:7d:86:a1:58:84:54:
f5:00:58:30:4f:54:09:af:74:ff:d6:15:29:d9:08:
82:c9:91:7d:22:f9:4d:fa:f1:28:df:35:18:8b:94:
aa:95:db:fc:d9:a4:44:10:60:b5:41:1e:7c:dd:65:
bf:72:2a:09:6e:53:ce:73:f9:9d:fb:96:bb:30:c4:
a9:98:02:22:f9:d4:b6:57:ef:be:bf:d1:5a:46:1b:
1c:7e:7b:b6:9e:ef:cc:52:fd:c1:de:50:24:a0:f3:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:EC:D0:B5:91:72:A6:EB:D4:06:D8:0D:A9:1F:C8:9D:B3:3B:BF
X509v3 Authority Key Identifier:
keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/E5817A58B8BE11ED83994B4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:1b:c1:8d:82:fd:31:03:68:a6:54:45:7c:9a:5c:31:4b:2d:
ea:0e:14:82:67:c1:43:77:76:bd:0e:a5:fd:c8:9e:64:42:67:
f5:0b:c6:af:95:d6:9c:58:e1:9c:9b:ed:83:10:ee:01:9f:1d:
33:cc:02:59:ad:8d:76:a6:64:b2:90:aa:68:c2:d2:92:75:f3:
57:33:a3:35:10:26:bf:05:e6:1f:a9:ac:98:4d:42:6c:3d:7e:
a5:47:7a:7c:dd:ca:25:01:e1:bc:91:d4:69:be:20:40:05:85:
34:99:b8:23:a8:9c:38:c2:83:e7:71:59:82:77:f9:55:0d:f9:
b6:24:12:35:55:71:f4:2b:cf:01:57:2d:5a:04:5b:90:7d:93:
ef:54:59:f6:8b:7a:6a:49:90:2f:79:c4:ad:1a:62:ef:e6:4e:
76:92:d4:00:13:19:eb:32:be:89:94:9d:75:41:7f:4f:c4:a7:
ab:c4:f9:d4:9b:49:86:3e:54:80:96:b7:f8:51:65:19:32:94:
cc:0e:14:6d:70:61:29:45:2b:dc:25:05:3b:ea:bd:c9:5b:fc:
64:a9:af:a8:c8:20:bb:fb:30:e1:62:cc:76:a2:8a:4b:95:ba:
50:ee:fc:5c:cb:1f:bc:8d:32:29:9b:ce:6e:86:b4:2d:a7:d2:
ef:9c:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:44 2025 by rpki-client