Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa
File: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (raw, json)
Hash identifier: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE=
Subject key identifier: 5E:CC:5F:D5:CA:19:E2:95:6E:90:4C:F7:AA:86:89:A3:3C:CF:37:A0
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 05A8
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa
Signing time: Wed 14 Aug 2024 23:41:55 +0000
ROA not before: Wed 14 Aug 2024 23:41:55 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136933
IP address blocks: 103.141.130.0/23 maxlen: 23
103.141.130.0/24 maxlen: 24
103.141.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1448 (0x5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Aug 14 23:41:55 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bd40c3-f30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:aa:ec:99:4b:1e:4f:de:f0:e4:96:4a:54:
8d:5f:e1:9d:eb:88:5b:58:42:d5:3b:c6:d6:c7:b4:
e3:c9:58:ac:68:7a:c5:7c:c7:40:34:42:4c:1a:87:
eb:13:e5:93:f2:1a:26:9d:ea:a2:00:7a:4e:ac:8f:
d9:f3:ff:60:1d:9c:0c:ac:a9:01:14:56:02:3d:b5:
81:72:55:f6:dc:0f:37:a6:0b:1d:16:2a:1e:e8:74:
88:5c:99:87:43:e7:8e:57:9e:de:3a:0b:c7:03:02:
22:de:96:9b:e7:4f:9b:2e:f1:b8:f2:54:31:60:47:
dc:24:ea:ed:5f:d7:3f:4b:08:07:67:29:b4:26:6b:
8f:7c:fe:f2:cb:b3:64:f0:59:b8:76:b6:05:1a:38:
97:be:f1:a0:69:3b:df:52:42:40:48:59:07:0d:fe:
16:ec:e9:f1:52:9d:9d:5a:2c:bd:6d:85:01:f0:95:
21:0e:02:d8:d2:d6:ee:a7:b1:b8:be:41:d7:7e:71:
5e:8b:8e:3a:21:48:45:a7:70:59:6a:80:1d:89:04:
98:d0:04:aa:27:30:bf:e9:30:3f:16:e2:e6:e9:29:
6f:08:e8:64:88:d0:67:64:ef:b3:df:01:d2:7d:c6:
f8:7c:a4:a5:3a:42:12:61:2c:e3:eb:5a:b8:8f:35:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:5F:D5:CA:19:E2:95:6E:90:4C:F7:AA:86:89:A3:3C:CF:37:A0
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/6E1BCBC495BD11EB89199F37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.130.0/23
Signature Algorithm: sha256WithRSAEncryption
36:f1:e5:38:d8:ec:f2:fc:76:e6:40:84:b1:c9:4e:22:dd:1e:
4e:07:54:b7:c0:89:7e:47:43:c8:c0:1d:62:9c:88:47:54:70:
90:db:96:1d:68:a6:17:24:37:e7:db:86:fa:46:a6:87:75:23:
1b:9f:a3:f8:d1:78:8f:e8:50:f9:08:44:2a:49:5e:04:da:38:
ba:aa:5e:56:c3:8f:67:4c:f0:b0:cd:4a:8a:5d:05:db:da:d5:
68:1d:8f:0d:5e:53:af:39:fe:d1:ea:53:01:56:e9:0a:08:ae:
ce:2f:11:8b:e2:ba:12:82:74:e5:0a:77:c3:84:85:8a:5f:fe:
27:78:7e:80:f2:b4:48:11:43:ee:88:64:fd:62:88:53:19:5e:
6b:6a:a8:0e:8a:8b:3f:27:94:fd:c4:76:2d:fb:ba:98:8d:b4:
b1:18:db:5c:6c:80:28:42:3e:5f:fd:76:f8:ae:5a:e2:40:e4:
23:1b:16:7a:5c:b5:53:a9:48:1c:de:10:80:83:64:b6:28:7e:
39:e4:b1:bb:0b:43:46:57:58:86:97:76:9a:4b:7e:39:fa:f2:
12:44:8a:8b:cd:7e:70:77:ca:92:ef:e9:f1:ca:f3:ee:f2:4a:
14:48:13:f9:af:90:58:3e:e6:24:6f:0d:04:66:66:72:ed:5e:
a6:8f:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:51 2025 by rpki-client