Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
File: 8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier: oLvgBlCfWBHyM0kCruTmzfjRSB8vdmfkR8wPd7mjdoU=
Subject key identifier: F4:BE:F5:9A:BB:24:96:CF:6E:B6:48:50:E1:FB:06:B1:6A:8E:E9:02
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2582
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:31 +0000
ROA not before: Fri 22 Nov 2024 18:06:31 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4294967200
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9602 (0x2582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:31 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c826-90a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:0f:eb:37:4e:b9:95:a6:d9:2a:6c:4b:34:
42:d4:0f:2d:84:40:74:6c:58:80:5b:92:94:ea:0a:
11:47:c7:47:45:2b:a7:c7:43:a3:72:cb:62:6f:b0:
b4:56:2f:3c:5f:f4:ba:3c:41:4a:4a:8d:3a:c8:52:
41:c7:26:98:da:38:65:4d:6e:cf:4c:d3:c0:d4:ab:
d2:cb:ad:e0:68:eb:08:dc:43:e4:ae:3b:ec:d9:c3:
a6:8b:0f:01:79:15:08:62:7f:4b:8f:44:44:bc:22:
76:3e:fa:5d:4b:1b:3b:87:a7:d4:01:84:54:85:45:
06:18:9a:3e:26:b5:a3:2e:42:fe:4b:d4:6f:48:0f:
0d:ff:99:b3:61:20:71:cb:8f:e4:61:ee:8a:d8:89:
47:4d:b6:a4:8b:fd:cf:c8:93:26:32:4a:06:a3:c9:
c6:80:4e:a2:d5:ae:f0:0f:c4:a3:d5:f4:cd:3a:04:
02:fd:79:97:ec:3c:46:5e:b7:0c:5d:69:dc:22:7b:
ff:0c:59:94:22:20:60:8a:60:87:a1:8c:39:70:56:
40:fe:ba:e7:f2:e5:26:81:ab:7a:fd:a6:a4:97:59:
c7:a5:41:d9:2c:c4:df:1d:16:7d:ec:b0:e7:87:d5:
ca:eb:88:42:fd:ad:d9:2b:58:97:c8:40:2a:43:53:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:F5:9A:BB:24:96:CF:6E:B6:48:50:E1:FB:06:B1:6A:8E:E9:02
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
28:58:38:dd:c6:04:9c:fa:1b:59:65:67:84:90:a3:b7:92:f8:
ae:f7:0d:ef:f3:ef:43:63:a2:32:d6:73:d6:54:72:f4:1d:24:
df:4e:46:85:a8:eb:60:0c:93:35:ca:80:96:b5:84:69:c9:5e:
c8:8d:c5:21:3b:9a:f0:1c:03:fa:4e:4d:77:0d:09:6b:53:5e:
6d:8b:57:6f:16:3f:a1:46:74:0c:e4:e9:54:84:8f:e3:c0:47:
c1:44:08:ae:b7:91:29:18:70:1d:a0:43:80:c2:2c:3a:eb:11:
e5:de:04:ee:b4:da:cc:cd:16:d9:0f:f4:57:7a:d2:88:7c:4c:
52:49:4e:7e:f7:24:73:fd:e2:28:49:15:bc:12:e9:22:4d:8c:
1d:02:d9:84:d0:94:95:b2:a3:43:78:4b:42:b9:99:6d:bc:ab:
46:05:44:b0:7b:c5:62:0b:84:96:3d:f5:ae:28:c9:72:da:ef:
f7:75:6a:fd:82:2b:9a:44:57:0a:d1:50:3d:1e:ea:1a:33:e8:
e5:6d:86:c6:c7:9c:9b:4d:5a:b6:21:05:92:d9:79:ba:a3:eb:
d8:52:0f:55:06:53:af:32:97:c1:ee:de:d1:cf:9b:a9:8a:de:
10:89:cb:ca:fd:73:3d:af:39:c4:06:86:5d:be:db:54:2e:d7:
2f:68:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:00 2025 by rpki-client