Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa
File: E5DE3744492611EAA7ADEB71C4F9AE02.roa (raw, json)
Hash identifier: Fz0CDYPtXNYhgB9YTjI1zGiOeMCYZZOlR8VF0yZ8kZs=
Subject key identifier: 8C:E3:C6:11:F5:8F:A8:94:FB:33:0A:46:E1:7C:3C:10:09:48:8B:43
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0A39
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa
Signing time: Tue 30 Apr 2024 20:59:34 +0000
ROA not before: Tue 30 Apr 2024 20:59:34 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 136450
IP address blocks: 103.88.140.0/22 maxlen: 24
116.204.230.0/24 maxlen: 24
2400:e340::/32 maxlen: 32
2400:e340:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2617 (0xa39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Apr 30 20:59:34 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66315bb5-b06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:d3:78:6c:d7:85:c1:44:2b:f2:85:de:3d:
4c:a5:a4:b7:0b:27:d4:e5:d2:89:74:49:2d:73:4d:
27:0e:71:a1:4d:1d:a2:22:47:f2:8d:84:28:ae:77:
5f:b8:6c:ad:83:f3:41:88:ac:bf:85:d6:f0:17:25:
ce:42:d4:3f:5d:04:0b:40:72:9d:33:41:61:ee:e7:
c2:28:31:d5:ac:5c:1a:b5:2d:63:0e:7f:18:27:f7:
a8:81:f3:f7:4b:9a:0f:02:86:70:0e:24:f0:09:a5:
5e:fb:4b:b7:4d:88:56:0f:85:92:e2:36:4a:37:9f:
de:60:56:c4:cb:91:6e:4f:d8:ed:61:4b:91:d1:71:
a3:4e:65:c4:00:4e:72:c3:f6:d1:f5:ec:3b:6b:3b:
87:4a:56:1f:a5:e9:c9:94:e3:2f:c4:f3:a5:9c:09:
e0:23:40:81:72:f5:cb:9f:3d:3e:b6:a9:6e:fd:96:
f7:3b:e1:be:07:5f:d9:af:b1:f5:22:de:cc:04:83:
79:65:63:c3:5c:39:6a:23:d7:2a:99:d8:4b:bb:31:
dd:47:75:2b:2d:d2:35:42:a3:73:9d:88:36:15:0e:
7e:0d:17:91:87:43:9d:2e:51:6e:30:36:3d:55:06:
f9:84:7a:37:69:92:c8:50:aa:1e:28:9f:18:d2:0d:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:C6:11:F5:8F:A8:94:FB:33:0A:46:E1:7C:3C:10:09:48:8B:43
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/E5DE3744492611EAA7ADEB71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.140.0/22
116.204.230.0/24
IPv6:
2400:e340::/32
Signature Algorithm: sha256WithRSAEncryption
9b:ea:b2:13:49:5d:0c:e5:9a:bf:20:3e:9a:95:2a:72:70:2a:
17:2a:43:39:f3:94:24:4f:06:08:bf:f1:70:19:91:70:a6:cc:
37:18:2a:da:94:ad:77:0c:10:d3:e4:57:f6:ef:83:7b:c6:cf:
57:f7:7f:36:00:92:b9:f9:55:c3:2c:d3:75:ae:f3:98:89:8b:
3b:1a:f2:35:bb:4b:07:e9:7c:40:42:16:a7:cd:ab:58:6c:d3:
fa:f7:3c:c1:67:58:c1:33:fc:9b:57:15:a9:4c:8a:8d:a6:4c:
c3:1a:78:03:b1:2b:fe:9e:fa:fb:16:50:d4:76:c2:31:16:b6:
ab:f1:41:15:9a:d6:07:f5:bb:f2:9f:7f:f2:8b:62:56:10:d2:
2c:28:ef:70:79:72:34:cf:00:24:b5:2b:64:51:bf:ab:03:0e:
b9:3a:ad:8c:c0:2a:da:79:10:8a:de:0f:12:4e:14:75:51:c7:
74:fd:27:31:1e:b1:b9:14:82:2e:e3:7a:98:77:d3:2b:e7:97:
43:32:2f:29:f5:76:cd:2f:e9:81:cb:ec:f1:1d:6b:6a:9a:c2:
0d:01:a7:25:74:08:ff:e4:5c:84:7f:15:ab:ad:10:ff:7a:c9:
8c:97:78:c8:cc:57:b8:f7:69:ae:76:a4:d8:c3:a3:78:14:ef:
b5:27:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:58 2025 by rpki-client