Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
File: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (raw, json)
Hash identifier: h0tUzjsSDJepu4YPR5C33X4gta0umpYL27rKDh0bZWE=
Subject key identifier: 09:C1:C9:0E:2A:E1:BA:44:93:CC:97:47:FE:75:D1:7F:96:C2:7B:3A
Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial: E8
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
Signing time: Wed 09 Oct 2024 04:18:32 +0000
ROA not before: Wed 09 Oct 2024 04:18:32 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133752
IP address blocks: 103.133.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Validity
Not Before: Oct 9 04:18:32 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67060418-d51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:24:82:a3:73:94:1b:cc:a8:d1:97:3f:7b:
33:de:68:6a:c5:7b:e3:76:17:25:39:98:4d:23:04:
d6:fb:39:3b:4e:a1:3c:12:4e:e9:d7:be:b6:45:7c:
a7:c0:79:00:1b:bc:55:e4:5c:86:44:cb:e8:f7:a5:
f4:d3:49:49:45:d3:d0:a9:65:e1:a6:7c:4b:6c:37:
17:83:01:a2:4a:09:23:23:f9:be:0f:ea:dc:10:9c:
d2:18:0e:6e:83:82:c7:99:76:b9:11:cb:60:f7:32:
8e:06:a8:83:4c:f5:0e:a2:2d:01:49:de:21:c7:d2:
bf:70:09:e0:cd:a5:5c:02:1f:69:74:35:dd:5b:18:
bf:d4:aa:04:7a:54:d0:f3:62:ce:b3:1c:8b:36:67:
a2:a4:30:55:5b:f1:85:34:f1:f6:c6:c2:f7:b2:4b:
74:0b:e3:3c:e7:5d:7f:8b:4f:28:90:be:65:00:25:
16:55:9e:39:15:4f:48:22:d1:0d:98:73:f3:1e:95:
44:f5:bb:d7:98:b2:ce:07:e9:ca:9c:56:75:46:16:
d0:6d:70:52:1a:4c:db:2f:7d:26:6a:0b:f9:cf:d7:
7d:9f:c1:50:a0:d4:83:f5:29:db:d3:c2:49:3a:9b:
24:5b:81:b0:dc:fb:85:ea:8b:6b:2a:e8:25:f4:84:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:C9:0E:2A:E1:BA:44:93:CC:97:47:FE:75:D1:7F:96:C2:7B:3A
X509v3 Authority Key Identifier:
keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.190.0/24
Signature Algorithm: sha256WithRSAEncryption
46:88:c1:74:1b:36:3c:43:71:b4:d6:a0:3c:8e:7d:cd:f9:e3:
1b:45:ce:14:7a:b8:db:d5:db:ac:4e:e6:77:a3:9a:47:b7:59:
71:20:ba:58:b7:30:bf:09:51:4b:c6:15:cf:8b:83:a1:57:0a:
bd:d6:f4:e1:32:6c:30:a3:8f:f9:cc:5c:75:08:41:4f:e5:b5:
19:bd:62:5e:5f:24:98:a7:dd:89:f2:9a:df:10:ae:df:27:df:
8c:ca:7d:a2:99:7b:31:9a:4f:24:a0:aa:11:e5:32:1b:2a:04:
85:a8:17:3c:0e:6e:0c:37:b6:46:b4:5a:41:4e:8b:3b:d6:be:
df:32:fe:9d:1b:8a:8b:e5:34:61:19:25:e8:11:a2:03:5d:ec:
d2:14:70:cf:1d:fa:36:0e:8e:75:57:4d:55:d1:13:1c:e5:1f:
6d:85:4a:d0:bc:82:05:b4:12:30:be:a4:e5:14:13:b9:65:c2:
31:96:29:a4:e3:4e:6c:44:c8:50:4c:60:67:f5:25:91:8d:1c:
d3:65:ad:9b:69:cc:e3:20:ee:bf:42:7c:67:db:81:ef:5d:e0:
12:03:03:2d:92:58:11:94:ab:a9:78:79:bd:4e:92:06:30:19:
2b:c9:dd:55:97:13:90:3f:27:34:8a:05:ef:b3:27:fe:82:7b:
51:9d:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:01 2025 by rpki-client