Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
File: 83EB3618E98C11EDAE292D56C4F9AE02.roa (raw, json)
Hash identifier: MVaQUhneNZ1PZ257HA9kFSZNDSi2GRzywb/MEmXLJwk=
Subject key identifier: B6:35:76:CE:A6:19:32:59:C1:AB:BA:88:6A:79:00:8B:1F:A5:5B:F2
Certificate issuer: /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial: DE
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:56:03 +0000
ROA not before: Mon 03 Jun 2024 06:56:03 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 140036
IP address blocks: 103.132.42.0/23 maxlen: 23
103.132.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Validity
Not Before: Jun 3 06:56:03 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d6902-76c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:ba:26:a3:3e:4c:08:58:ca:ca:a6:a2:2e:
9b:12:d4:ce:2a:e0:31:11:a1:4d:86:9a:8e:c9:5b:
a8:47:52:4b:6b:8e:fc:83:f4:ed:2b:b0:61:8b:b1:
c9:c4:8a:63:78:cb:bd:bf:94:c5:7b:ba:17:46:fe:
29:8f:2b:83:cc:ad:19:88:f5:46:e0:39:d3:73:eb:
74:1c:96:e3:ac:8b:3b:1c:04:a4:e9:05:44:62:9f:
0d:2b:b3:fa:80:bb:58:0a:a8:ff:e8:2f:3b:f2:b6:
ac:ec:da:49:47:39:fc:a1:56:2d:50:a2:e9:e8:3f:
09:36:22:09:68:05:49:db:c1:03:e5:f5:5f:18:39:
94:9c:25:f0:32:8c:5f:ce:4a:13:d1:1d:4d:de:bc:
69:7c:eb:3f:d1:e0:7e:3a:e1:0e:68:f0:ff:77:5a:
d2:f4:c6:92:1a:45:d3:51:ac:e3:62:f5:7c:c4:43:
88:65:db:54:e0:f0:5e:1f:a2:06:10:1f:6d:38:37:
76:dc:e0:aa:52:23:17:80:b1:7d:67:16:3e:b8:8a:
2a:b0:cd:73:9b:c0:b2:09:c8:54:cd:8a:0d:42:93:
7d:71:ed:a5:ca:a1:6e:32:13:da:28:f4:7a:03:84:
ba:a9:27:cb:b7:1f:ea:52:08:09:8c:67:52:18:ab:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:76:CE:A6:19:32:59:C1:AB:BA:88:6A:79:00:8B:1F:A5:5B:F2
X509v3 Authority Key Identifier:
keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/83EB3618E98C11EDAE292D56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.42.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:c2:fd:4f:9f:bf:66:d5:88:4f:ea:9a:8f:52:40:c1:9d:14:
f3:42:cf:95:8f:a2:37:59:f5:47:22:a9:56:14:a8:38:ac:e8:
cf:a5:07:be:10:57:11:71:eb:f7:a2:f3:65:15:e0:00:f5:c7:
de:0d:25:c7:49:c3:d8:65:b2:d0:fe:d0:eb:d6:c7:c2:65:9f:
47:b7:63:f7:75:59:60:66:26:65:af:f9:1c:1a:12:76:e9:5b:
2e:a7:0d:a8:f0:56:3a:76:dd:48:fa:c7:a2:24:ac:53:70:dd:
3e:a5:c4:ca:82:51:45:9f:2c:c1:a0:2e:b3:a2:92:b1:9b:9b:
a4:44:2c:37:43:59:4d:16:a9:66:d8:6b:24:b4:46:77:ba:00:
e2:92:94:3f:39:33:0d:64:21:8a:55:19:db:fc:1a:80:16:92:
82:62:2e:13:c8:db:ed:ee:f3:8e:b0:26:b4:58:81:f4:b2:99:
7b:4e:a3:cd:1f:e9:bd:75:a2:14:09:ac:98:48:90:1e:ae:0e:
ef:94:83:85:d8:5f:fb:22:8c:61:d7:19:3a:2e:c5:f9:02:f0:
74:43:dc:8e:7c:47:6f:c2:3a:f1:af:59:67:21:ee:4b:01:0a:
08:9e:af:84:77:f4:62:7b:da:de:b0:a6:e7:b7:cd:da:68:77:
98:bb:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:15 2025 by rpki-client