Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
File: 138E2452F89011EE8B2FC42AC4F9AE02.roa (raw, json)
Hash identifier: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=
Subject key identifier: 4F:CC:39:81:65:88:DA:41:BE:63:A7:D2:51:AE:B3:7A:BC:40:66:48
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: 43
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
Signing time: Thu 01 Aug 2024 07:48:01 +0000
ROA not before: Thu 01 Aug 2024 07:48:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 134090
IP address blocks: 103.153.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: Aug 1 07:48:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ab3db1-2535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:4d:98:03:36:79:3c:c8:74:84:66:c3:05:
81:92:25:7d:f9:d1:42:68:53:f0:45:f4:7a:20:fe:
d5:2f:77:54:0e:3d:15:83:a6:a2:5a:df:28:bc:6c:
33:fd:41:10:a4:5c:5b:66:80:91:01:67:fd:36:06:
0e:a8:7f:9f:20:7e:43:b2:bb:e6:27:7d:d3:dc:3a:
85:0b:4c:02:cd:94:65:57:0e:82:61:7d:c6:70:16:
d8:22:fe:08:b5:0e:e3:a6:87:44:96:a8:9b:3e:e1:
d9:47:9e:bc:a8:aa:51:a5:f9:2c:34:d0:32:30:48:
b4:44:e5:e0:a5:d7:f6:7c:8a:0c:19:41:8e:6d:31:
63:55:bc:db:9a:9e:41:dc:40:45:b6:db:32:20:ff:
55:b1:03:c9:a8:f1:3c:32:1e:ad:87:d0:95:96:cf:
31:86:90:5b:7b:c1:b3:6a:74:1f:f0:4c:ed:60:63:
3a:9f:92:82:c3:3f:94:82:29:ef:6b:07:cf:e8:39:
61:6f:41:11:8d:fb:71:b9:04:bf:3f:09:a4:ac:fc:
62:49:21:6f:bc:8e:48:66:8d:dd:ea:b8:a0:2e:f6:
35:e7:98:45:48:a3:02:34:7e:c5:fd:82:06:9c:9d:
dc:17:64:fd:89:19:90:71:ed:4e:27:27:10:63:cc:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:39:81:65:88:DA:41:BE:63:A7:D2:51:AE:B3:7A:BC:40:66:48
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:00:77:c9:61:87:fb:8a:c2:d0:84:da:3f:e7:88:83:a7:91:
52:91:d4:0a:e5:33:20:93:77:ea:47:d9:85:ae:09:c4:28:53:
97:5f:a2:56:5e:85:bd:04:1b:8f:fb:ad:95:23:5a:52:7a:a2:
2e:9d:cb:c1:de:b4:84:c5:0d:27:64:9f:c8:5c:6b:d8:f6:9a:
20:5b:71:a5:7a:83:f0:67:0e:67:7a:98:73:fc:26:42:88:cf:
c1:0e:97:90:c7:9b:d4:19:36:ff:ae:18:9b:0f:c6:6b:6f:a5:
bd:ef:1a:e7:8b:19:dc:d7:f7:d4:b4:87:a7:20:16:15:44:63:
08:22:34:be:d0:ed:eb:ae:55:46:b9:8d:44:e5:47:e6:73:51:
2c:4c:74:ab:a0:0a:ed:90:f3:f8:31:72:5b:3d:c1:8f:8d:d7:
ae:38:be:52:cb:99:51:c9:3b:ed:f4:ae:80:43:66:31:77:37:
43:18:28:cf:d9:38:f5:c1:60:a2:c8:e2:42:9c:0b:46:5a:4b:
b2:b3:75:0a:a1:a1:7d:1f:73:01:b1:49:3f:50:35:a1:a0:06:
e4:4f:72:b4:1f:1b:6e:66:3c:09:de:c9:af:49:1b:43:7f:c4:
1f:cd:9e:68:61:e0:7a:bf:b4:2b:ca:7c:4b:e3:cb:22:b6:12:
4e:d2:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:16 2025 by rpki-client