Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
File: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (raw, json)
Hash identifier: H8chFs7Chanf/nxpYKt3kJcY1R+IJyXtrPVEjPoZqk4=
Subject key identifier: 31:D9:86:25:60:5E:F3:3B:64:0A:92:CB:B6:EA:47:5A:08:FD:E3:21
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 257C
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:25 +0000
ROA not before: Fri 22 Nov 2024 18:06:25 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 139038
IP address blocks: 103.138.210.0/24 maxlen: 24
103.138.210.254/32 maxlen: 32
2001:df0:5580::/48 maxlen: 48
2001:df0:5580::/54 maxlen: 54
2001:df0:5580:800::/54 maxlen: 54
2001:df0:5580:1000::/52 maxlen: 52
2001:df0:5580:1000::/54 maxlen: 54
2001:df0:5580:2000::/52 maxlen: 52
2001:df0:5580:3000::/52 maxlen: 52
2001:df0:5580:7000::/52 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9596 (0x257c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:25 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c821-3fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:4e:92:98:99:75:c1:14:51:db:54:bd:c2:
70:cb:6d:a8:d7:9c:fd:32:73:fc:51:ef:7d:cb:bc:
01:b6:c4:fb:fc:cd:80:09:17:c7:48:17:e2:ac:6b:
ca:30:f9:62:55:7a:bc:e4:9f:bb:a9:ea:90:55:e8:
91:e9:8e:39:dc:f1:f5:a3:50:17:2a:a5:b3:c4:89:
26:99:9c:cf:fe:c0:12:3e:58:10:c8:56:89:29:14:
1e:49:c1:74:ac:10:50:b5:62:3f:f3:94:0c:aa:3a:
55:06:26:61:fa:a3:12:9b:57:2c:ca:4c:f6:ec:de:
68:16:e4:0d:c9:63:1b:d2:e5:7b:e8:6a:59:22:d9:
23:be:42:1a:1b:46:65:16:24:0c:db:f6:d3:72:89:
76:d7:1f:e0:36:5c:96:fa:6e:e8:0a:09:85:77:b0:
8a:78:98:2b:35:cf:40:80:2a:86:c3:eb:13:5a:33:
1e:bc:f9:59:ee:08:30:36:72:98:ed:9b:77:0e:27:
bc:92:17:cc:49:b3:59:f0:2f:7a:7e:ae:2f:94:a8:
41:8f:4e:4c:e6:6d:db:3e:e8:52:9a:3a:a4:29:31:
bb:25:27:c6:f3:4d:78:31:eb:0e:a9:e6:e4:84:41:
c7:60:7d:71:d0:cd:63:51:db:e5:15:18:06:94:c0:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:86:25:60:5E:F3:3B:64:0A:92:CB:B6:EA:47:5A:08:FD:E3:21
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
IPv6:
2001:df0:5580::/48
Signature Algorithm: sha256WithRSAEncryption
93:16:37:b1:f8:85:28:60:51:ff:18:9e:cf:59:f2:9d:24:5a:
35:e5:4a:05:d8:6d:32:f1:e0:8e:34:65:e0:a4:d6:55:aa:43:
62:8b:7a:a3:c8:3d:d8:bb:33:86:68:f7:35:bc:e4:cc:49:7e:
a1:78:d3:1a:25:69:83:b8:84:0d:57:22:0d:e5:08:c6:fd:31:
d4:db:50:8e:e8:69:3a:ef:b0:49:24:fc:7a:96:60:9c:69:ee:
74:32:45:aa:f4:56:a1:7e:24:ce:d1:f3:36:fa:d4:4b:a0:d7:
ca:58:64:fe:e6:d3:a0:94:f7:fa:8f:bb:b1:8b:6f:9f:7f:92:
c1:32:c8:b0:68:6e:73:cc:60:1e:f5:32:d2:75:6d:32:73:26:
c2:10:e0:b0:4c:ac:43:56:7f:8c:ea:d3:7a:4c:1a:d1:d2:dd:
07:21:83:41:1b:1c:b9:d9:b2:41:70:bd:8f:93:ee:46:82:36:
eb:76:34:b3:0d:d2:07:8e:b9:c6:45:da:44:f6:57:a5:73:e0:
c3:95:73:9a:31:27:5c:a7:da:3e:e0:d0:11:95:b1:11:53:18:
05:73:d4:7b:bb:f3:c1:d9:72:fe:47:d2:2e:ee:18:7b:9e:1b:
6a:b1:e2:34:1a:13:f5:26:81:7c:4a:2d:44:f3:35:b5:cb:77:
35:7e:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:54 2025 by rpki-client