Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/A7885708BC6311EFA24E9055C4F9AE02.roa
File: A7885708BC6311EFA24E9055C4F9AE02.roa (raw, json)
Hash identifier: HDBQ3hj+FAu6YsJ1msMkqW/NUftIznm3i3wzYzudBWE=
Subject key identifier: 24:D2:E0:CD:E7:4E:AE:BD:9F:6B:3F:4F:81:94:23:4A:ED:3D:F3:0D
Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial: 011E
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/A7885708BC6311EFA24E9055C4F9AE02.roa
Signing time: Tue 17 Dec 2024 10:42:47 +0000
ROA not before: Tue 17 Dec 2024 10:42:47 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 132490
IP address blocks: 103.239.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Validity
Not Before: Dec 17 10:42:47 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=676155a7-7411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:36:dd:d1:1b:18:7c:08:09:0e:e7:93:c1:
48:0c:75:c6:fd:da:34:63:a5:36:21:d4:42:1e:02:
8e:a7:52:d6:bd:ae:5c:12:30:05:bb:82:44:da:19:
15:65:d4:59:fc:1c:87:f2:51:4f:97:4d:30:79:80:
f9:12:db:63:1e:ef:da:61:45:a9:6e:6f:85:c7:76:
2b:3b:c2:20:e8:fd:0d:9f:2c:ca:94:9b:fc:1b:49:
28:84:12:1a:8f:6f:86:71:e1:ac:74:1b:cd:e0:e7:
6d:c6:30:90:ca:86:8e:ac:4f:bd:f8:af:38:8c:85:
8f:ad:58:62:65:b2:20:e1:89:55:9e:82:0e:13:73:
23:0a:25:0e:98:88:06:ff:aa:08:e8:24:b2:6b:a0:
2a:d2:99:f1:dc:ff:5d:5f:f4:10:e4:ba:09:c1:66:
3e:78:17:da:74:4b:74:99:96:04:6c:dd:36:db:a5:
70:6a:c4:b4:ab:67:0e:a4:0f:0b:70:25:e5:12:4f:
a7:29:24:7d:31:76:18:dd:8d:eb:e9:cf:18:ef:10:
d8:aa:cf:bc:90:79:21:1e:d0:76:60:75:3e:70:a2:
fe:f4:f5:fd:31:01:1b:ee:65:a2:bb:35:91:c9:b0:
6c:f1:61:7d:5d:90:07:0b:26:f8:53:9a:32:ce:8b:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:E0:CD:E7:4E:AE:BD:9F:6B:3F:4F:81:94:23:4A:ED:3D:F3:0D
X509v3 Authority Key Identifier:
keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/A7885708BC6311EFA24E9055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.82.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3e:10:a1:85:d1:12:07:e6:68:fe:69:de:2a:69:bd:90:36:
f6:da:07:96:c3:9b:8b:83:64:78:06:3e:ee:ec:68:95:7b:ab:
92:23:2e:3f:b2:59:3a:99:45:40:93:65:4b:4c:05:b1:24:fc:
62:fc:36:f5:9e:91:83:42:d2:c1:83:97:c0:2b:83:e5:10:9c:
27:3c:cc:c7:ee:76:05:45:6d:c6:68:12:ec:6c:19:01:06:19:
4c:dc:2f:08:3c:ec:c5:fa:3d:7a:8c:80:ca:da:00:99:bd:a3:
a2:d0:04:89:87:86:2c:b2:63:4e:90:51:28:f6:ea:25:45:6d:
1c:89:3d:c8:8e:10:1a:5d:1a:92:33:07:d4:ce:84:db:99:cc:
4e:2f:18:bb:80:b9:c0:04:75:fd:7d:14:46:68:69:95:bf:d6:
ef:bc:12:13:76:f1:e2:12:f0:26:14:b8:4e:33:ef:dd:84:99:
6d:bb:40:c0:89:5a:fa:32:80:08:68:f5:38:38:60:b6:ce:c6:
b2:78:af:45:55:31:33:e3:d7:f1:15:a0:ac:f8:83:68:83:5f:
7a:f2:d9:71:01:48:fc:f2:d6:f9:25:11:55:82:8c:c2:e7:5d:
13:2a:0f:5b:9f:75:22:99:04:2e:f6:10:4d:93:d4:75:b0:06:
0c:74:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:49 2025 by rpki-client