Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
File: B53FD334575411ECAA094876C4F9AE02.roa (raw, json)
Hash identifier: 2MTATyqKSTHUVd7g9Sm7nQ+UoklKPAzLkDvMRnqfm70=
Subject key identifier: B5:53:DF:4D:D6:07:DD:9F:EB:9F:82:CA:ED:38:D3:58:BD:5B:93:EC
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2587
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:35 +0000
ROA not before: Fri 22 Nov 2024 18:06:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 65535
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9607 (0x2587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c82b-913d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:17:0c:8e:72:05:07:20:ce:7c:a9:bf:82:
36:36:e3:1a:5d:8b:7e:e1:20:5e:d2:66:c3:a2:69:
dd:29:b8:82:37:a5:a1:bb:6c:a0:73:af:de:d8:de:
b9:5d:f9:a3:c6:e9:fd:41:86:9d:b2:4f:52:97:74:
51:5d:00:52:21:30:31:a4:88:14:0d:b4:65:18:8a:
01:42:27:9a:55:2d:1c:81:dd:3c:0f:e5:9c:d5:f6:
a5:5d:38:38:69:04:22:41:04:15:22:98:1d:70:7d:
d0:35:39:69:e2:42:86:25:d8:75:89:00:ad:cc:bc:
f2:37:1b:bb:ca:27:32:89:17:48:e1:31:a0:09:24:
18:0e:34:9d:f4:4a:12:7f:90:24:70:d9:5f:c4:65:
1a:75:18:60:59:09:20:f3:92:4e:78:04:9c:1d:1c:
02:e8:6b:4d:7d:1c:bd:91:6e:a8:b2:f8:d5:a5:8f:
72:0e:a2:b7:3a:19:36:97:46:2e:9b:f8:b7:60:0d:
91:cf:ce:bd:21:1f:ed:ad:2e:9f:87:1f:ca:65:35:
32:62:94:f5:19:f7:32:d7:c9:72:1c:09:c0:62:ce:
27:bb:3e:11:35:90:49:54:7d:c5:06:27:0b:8b:a5:
2e:9c:5a:5a:e6:01:f4:40:6e:f9:df:a0:f8:5e:7d:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:DF:4D:D6:07:DD:9F:EB:9F:82:CA:ED:38:D3:58:BD:5B:93:EC
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:99:2c:27:29:7b:d1:3f:a8:10:3c:30:a9:e9:aa:5a:af:62:
ef:48:d9:e2:e6:05:d9:90:ad:08:f7:71:d0:bc:79:cb:a3:8f:
1e:78:b3:21:bf:03:f4:54:d6:21:f7:9c:34:44:47:04:2e:6b:
a9:e2:e8:0d:50:56:86:3b:1e:0b:d8:0a:ca:22:d0:dc:be:89:
b6:47:ef:05:21:39:71:bb:f3:1c:56:ee:53:4c:1d:fd:38:50:
77:df:d5:da:46:01:27:9a:89:e1:d7:9d:8e:ba:99:c4:33:c5:
3d:f4:36:2b:94:a5:86:78:bb:b2:0d:4f:93:f6:90:46:37:c2:
ec:23:ef:16:1f:4c:b8:40:ea:2f:36:bc:16:b0:74:2c:c9:04:
79:8b:65:ba:08:7c:c2:b7:c9:65:92:b8:de:81:69:35:7a:c4:
b2:50:7e:70:94:74:3e:cd:5b:03:35:9d:75:4e:91:b9:26:54:
53:87:84:62:0d:79:81:4b:02:a4:ae:73:e8:51:72:4a:40:6d:
3f:65:aa:ee:d8:6b:44:a0:6d:29:d1:5c:f7:ab:5a:74:8f:2f:
78:92:0b:57:53:14:91:57:03:d0:f2:a8:ab:bf:5a:ab:ba:81:
6e:07:a4:b1:28:44:80:cc:49:0d:cf:23:b9:6b:ad:7e:34:4e:
22:04:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:26 2025 by rpki-client