Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
File: 04758F0AA43411EAA22B0871C4F9AE02.roa (raw, json)
Hash identifier: XjI//uz3MIHrje/lHeiBp2v7ZWt9cLzLUWC9pX6gjb8=
Subject key identifier: F0:0F:CC:56:C9:AE:A1:1C:74:66:E7:F4:CC:40:59:77:FE:F1:B7:25
Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial: 081D
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
Signing time: Tue 30 Jan 2024 21:59:34 +0000
ROA not before: Tue 30 Jan 2024 21:59:34 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 7642
IP address blocks: 103.87.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Validity
Not Before: Jan 30 21:59:34 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65b97146-c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:35:23:a5:2d:4f:c6:69:ba:dd:39:2e:d3:
e7:72:c4:d0:c1:b9:a0:a8:ab:7e:c7:24:74:56:de:
63:fa:af:ae:4b:88:48:06:a2:25:2b:68:a1:1f:11:
6f:57:e3:e0:51:90:20:93:23:2a:68:b2:fb:eb:55:
9d:ac:72:71:6b:f2:ad:4a:61:4c:67:36:eb:94:69:
30:52:b7:b2:12:64:9f:b6:1f:a7:56:38:3e:18:22:
a4:07:58:c0:da:3d:87:b4:df:dc:b4:8b:1c:01:13:
e3:f2:9c:07:24:d4:43:7d:82:dc:a9:18:26:b6:87:
99:b9:91:e7:65:50:da:10:bb:71:b9:d2:c8:6f:cf:
5c:7e:bb:69:ee:9d:67:22:39:66:74:1e:f4:6f:a0:
75:30:fb:90:2c:1d:2c:e7:85:65:27:c2:2f:48:1a:
d8:de:99:9e:66:a8:71:e7:0d:e5:34:c3:ce:d2:53:
9d:52:bb:c6:1f:4c:fc:3c:38:48:7a:b4:10:d8:13:
e5:c9:f6:c6:32:8e:58:05:ef:c7:64:1c:94:92:b9:
6e:7b:d8:6a:12:1f:5e:58:8a:30:8d:b6:44:c6:a3:
fd:bb:85:3e:78:6b:ac:58:34:30:f9:5f:4a:0e:23:
78:37:c4:e7:55:3e:9c:b5:a1:4a:ff:6d:07:d6:36:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:CC:56:C9:AE:A1:1C:74:66:E7:F4:CC:40:59:77:FE:F1:B7:25
X509v3 Authority Key Identifier:
keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:eb:d5:3f:93:52:4d:fc:97:bc:69:60:df:8e:db:67:55:d2:
a8:af:db:92:5e:48:1b:2e:7e:17:b9:09:b0:68:e5:fe:41:8c:
ae:11:34:88:b1:4c:7a:74:97:84:75:38:4d:0d:3d:bb:d8:2c:
2f:33:3d:99:32:b1:cc:a9:75:37:ff:0f:88:83:99:57:10:1e:
84:44:71:c1:ba:8f:c8:9b:15:97:ab:dd:ed:41:de:27:97:30:
7c:fb:16:a8:95:90:64:7b:d6:83:aa:ab:ff:e4:37:1f:39:91:
6b:cf:01:02:b5:26:66:5a:1d:0e:a3:87:c1:67:cc:63:55:b1:
48:a2:f7:d3:c4:47:6c:dc:3c:a7:ee:52:d5:f8:cd:1b:42:eb:
24:51:27:78:a7:fa:86:5d:3b:ee:77:5a:40:f1:b2:0b:e8:a7:
95:a3:2b:d9:c8:94:8b:8d:ee:92:b0:19:2e:d2:6a:bd:0b:c8:
3f:c1:8c:03:c5:46:eb:69:09:14:f0:75:52:63:2c:29:c7:19:
5d:70:a5:90:68:5a:b9:d7:4e:84:37:61:a0:30:71:37:22:68:
c7:52:46:7a:3d:7b:5e:97:7b:be:47:ec:de:c5:46:2d:0e:86:
f3:92:10:d1:00:54:27:01:ee:1b:fa:7e:e0:55:9d:a9:e2:7c:
b4:04:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:16 2025 by rpki-client