Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/06535DB891E011EFAE09CC5BC4F9AE02.roa
File: 06535DB891E011EFAE09CC5BC4F9AE02.roa (raw, json)
Hash identifier: IK+KJORwXtRNvcZk2/iGQx+iPymjXRUK7Z4AQxIAUZc=
Subject key identifier: E6:7C:C5:2E:E1:F3:54:73:AC:47:7B:F0:3B:1B:E3:7C:C4:6F:0F:96
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2584
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/06535DB891E011EFAE09CC5BC4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:32 +0000
ROA not before: Fri 22 Nov 2024 18:06:32 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 45192
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9604 (0x2584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:32 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c828-40f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:9e:1d:b6:e3:ef:58:aa:0d:ea:8f:a6:7b:
0a:66:9a:17:a6:ef:ae:58:c3:b0:be:5f:91:26:fc:
a4:d8:b8:e5:59:e1:bc:5e:e4:5b:99:0b:4d:70:a5:
5e:55:77:fe:e0:0d:40:cc:a5:ed:c1:0f:24:2a:07:
92:ac:b8:a9:33:11:6c:8c:5d:23:25:eb:43:4b:38:
41:c6:ab:11:60:a9:54:e0:9b:b5:49:3e:4c:17:1b:
90:b4:60:5a:1a:6d:13:e0:d8:8b:1a:c9:ca:25:f3:
c0:a2:08:4a:00:a3:e6:23:a9:24:3a:e3:d8:43:e2:
8a:12:4e:93:54:23:a3:33:1d:c5:b8:c8:a4:44:e8:
4d:22:04:b9:8a:af:b2:f3:81:d5:af:b8:4c:55:b5:
40:b4:33:4d:4c:2e:2a:cf:60:45:7c:2a:0c:59:8e:
f4:94:0b:58:0f:3b:79:12:9d:98:17:ea:66:72:3a:
dc:f3:27:b6:4a:32:44:cc:73:4e:e4:04:08:4a:fa:
da:a6:6a:4e:84:e4:85:20:19:f8:b0:be:45:17:6b:
66:72:b2:6a:67:86:c9:82:d9:e4:c2:a9:04:15:2c:
67:e9:98:84:ca:7a:b2:20:b0:59:99:f7:6d:a0:f9:
9d:90:14:97:09:61:8c:b9:64:3e:ea:8c:2d:36:bb:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:C5:2E:E1:F3:54:73:AC:47:7B:F0:3B:1B:E3:7C:C4:6F:0F:96
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/06535DB891E011EFAE09CC5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9b:83:78:b4:2b:7b:89:0f:1e:d7:3a:b3:14:24:51:08:e5:
d7:41:c0:72:12:23:96:19:0d:06:d7:c4:c0:ac:38:00:cd:31:
f8:31:1d:d9:3e:da:6e:8e:f1:77:00:f0:e7:2e:a8:e3:f4:b1:
bf:a8:46:43:b1:f0:c4:95:69:52:de:ec:5d:c3:6e:4d:ac:62:
35:b4:17:38:f4:13:f5:32:b6:a9:33:ff:e6:d6:e3:1c:26:e2:
a1:80:e4:ea:59:19:79:ec:c6:93:ac:7a:aa:c1:25:cb:81:36:
ad:37:96:4f:3d:ce:70:f4:6f:9b:45:78:bc:62:04:f4:d8:fd:
98:2e:e8:19:7c:31:7a:35:60:82:01:ed:e4:64:e3:94:90:7b:
11:af:1a:7a:a4:3d:de:c2:a5:bc:cf:33:d7:c4:9b:7d:b7:44:
a9:c4:ce:9c:75:05:52:70:53:32:99:fb:0e:31:a9:6d:77:a1:
9e:32:21:22:d4:a1:c7:15:3a:d0:b0:40:0a:2c:ec:bb:db:3e:
8c:7a:7d:86:27:4d:bb:1a:b7:0c:32:0c:46:d2:7c:5e:2e:c6:
08:63:14:52:bc:4c:c1:a5:27:61:c3:84:21:ea:c0:35:4b:b5:
63:74:53:d4:af:59:57:85:c2:a5:b5:16:88:6f:15:46:f7:38:
af:34:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:45 2025 by rpki-client