Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
File: 0578A814931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier: 07OvfpIalWCuhBb9BS1dWjfv+TRxzbWXWg36O70lE7M=
Subject key identifier: 70:03:25:BF:AA:D7:7F:F3:33:E2:7E:C2:D2:CB:50:3E:C4:6E:11:95
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2583
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:32 +0000
ROA not before: Fri 22 Nov 2024 18:06:31 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4294967294
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9603 (0x2583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:31 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c827-65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:91:49:16:91:ea:71:67:3d:f3:5e:18:45:
38:5d:fe:6f:9d:1e:bf:a0:3c:5c:2f:3c:f1:35:e4:
97:cd:91:87:11:f9:8a:f0:62:ee:9b:d5:ac:19:08:
ab:4c:b4:62:cc:48:ca:1e:54:93:24:54:a9:1e:e2:
21:5a:72:32:60:77:dc:c3:e8:f8:40:25:83:8e:cb:
ce:66:2f:65:81:e7:ab:1e:3b:e1:c8:4f:b1:ea:1b:
42:03:84:e7:73:d4:4c:d5:f0:53:3b:6d:79:27:de:
30:e2:54:8e:7b:21:11:5e:a1:28:79:aa:f8:4e:af:
3c:a7:79:ee:6d:aa:72:98:9a:f1:2c:5c:90:8b:53:
3e:8e:83:60:02:ec:3f:48:ff:4a:ea:a5:71:86:da:
4e:8b:56:53:88:e9:02:71:09:1b:01:34:d7:66:9b:
37:69:d9:c2:2f:d0:88:46:3e:49:45:cd:19:1a:fd:
25:a7:5f:a9:00:f0:12:89:5b:98:db:7e:be:40:2b:
30:87:3b:a0:91:5c:30:9f:53:5b:af:44:84:d2:4b:
5c:c7:a7:86:bc:87:bc:98:53:ad:5e:65:80:1e:4f:
ba:73:42:0f:2a:e3:bc:19:c7:7a:62:fb:03:8d:07:
17:5d:d5:22:f8:cb:14:84:56:8f:d5:73:fc:19:cf:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:25:BF:AA:D7:7F:F3:33:E2:7E:C2:D2:CB:50:3E:C4:6E:11:95
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0578A814931111EDB92FFC5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:38:89:74:1c:c5:77:b9:52:08:75:ae:56:72:f7:e9:16:48:
17:6d:4a:ce:06:41:c7:7d:1f:c9:69:ce:d6:d3:be:14:f5:76:
97:d1:4a:94:5c:1d:13:3c:fc:71:71:e9:86:4f:8e:32:23:8d:
da:93:7f:f2:da:b1:ee:52:39:bc:a5:2f:9a:df:76:d0:2c:df:
9a:84:3a:55:48:a8:a9:3d:90:1e:d9:39:f0:3c:43:94:35:39:
8d:4c:7c:f0:3e:56:ca:bc:17:f2:a1:ca:f5:77:a3:6a:aa:a5:
d1:ee:af:bc:3a:f1:e3:96:7d:bc:50:2c:81:f0:e0:bf:5b:1c:
9d:95:99:ee:f6:b0:73:d7:75:43:77:c1:1e:9f:64:3f:2f:50:
4e:1f:13:99:f1:56:91:cb:64:b2:6d:23:b1:04:88:4a:61:c1:
e6:9f:c3:97:b6:60:aa:1c:72:ef:5a:dd:29:14:5d:52:b6:6c:
52:b2:ee:8e:d3:2b:9d:46:d4:20:a3:1f:f4:83:f3:ac:75:bf:
26:72:cf:4a:5a:2a:a4:81:4a:03:59:e3:2d:6e:59:1d:a0:e5:
bc:c7:7d:dc:9f:58:46:5d:05:72:ab:98:a8:23:48:d1:24:64:
cd:39:13:10:46:6d:3a:c8:94:a2:58:d9:6b:fa:6d:d0:a6:ae:
70:28:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:59 2025 by rpki-client