Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa
File: E382826C4AF611EFB245AE59C4F9AE02.roa (raw, json)
Hash identifier: gHlBFVvPZXMJ6Q+hYaSkMK4+kMOfC8z9KiEMGQejTNE=
Subject key identifier: 3E:A4:B6:F8:51:9E:9D:F8:53:A3:AF:6E:34:B7:CF:09:7C:58:DC:DE
Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial: 076C
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa
Signing time: Mon 12 Aug 2024 21:39:55 +0000
ROA not before: Mon 12 Aug 2024 21:39:55 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135494
IP address blocks: 103.219.232.0/23 maxlen: 23
103.219.232.0/24 maxlen: 24
103.219.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Validity
Not Before: Aug 12 21:39:55 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ba812b-fe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:c1:3b:0b:b3:8d:30:9c:be:07:3f:3b:75:
91:ae:15:ee:61:9e:11:4b:fa:24:2e:52:8a:33:e1:
95:d9:7b:2d:a6:46:b9:ee:8a:62:b2:e1:d4:ff:48:
bf:0c:2a:a3:2e:1d:2a:72:54:31:5e:a9:18:bd:e6:
ee:2d:c3:79:6f:18:30:e6:20:36:b3:16:8c:33:e7:
e8:6b:50:56:e6:19:d4:ae:ab:8c:cd:85:2c:69:27:
03:39:25:ed:9a:0c:3a:3b:a4:88:66:77:e4:97:8b:
59:fd:a8:4b:0b:30:b2:6c:41:9d:7b:e8:48:79:7c:
84:6f:b0:99:eb:02:ff:68:b8:e5:14:e9:e7:a9:75:
8c:6a:49:47:d6:fb:c1:d1:a5:51:02:e3:b7:b1:69:
15:2a:59:27:b4:10:23:a3:b0:d3:dc:e7:4e:5e:ca:
11:ed:07:18:9c:4e:b1:4e:92:18:f7:22:79:4b:57:
43:80:07:a2:36:c7:d2:a9:c7:4f:d2:55:00:35:b8:
50:1f:60:d4:27:dc:97:ed:d1:99:24:55:09:3c:ec:
78:de:20:6f:31:51:a9:4d:21:e8:f4:88:a2:50:bf:
34:46:7f:bf:66:7a:b3:df:4b:6f:d5:dc:7b:12:2d:
6d:b2:38:e8:f0:d8:8c:61:83:b5:9b:2a:2f:6f:f2:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:B6:F8:51:9E:9D:F8:53:A3:AF:6E:34:B7:CF:09:7C:58:DC:DE
X509v3 Authority Key Identifier:
keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/E382826C4AF611EFB245AE59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.232.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:18:14:93:99:86:a4:07:81:8d:45:d2:8e:7a:19:35:78:e3:
97:fc:24:fd:45:13:f3:0b:f0:47:e6:98:1b:7d:7e:fe:5b:b5:
23:63:c1:0f:89:3c:93:20:e4:ee:11:74:57:27:a9:f3:42:dc:
03:93:34:58:e1:df:b5:29:a5:69:aa:8e:69:3d:4e:a1:3d:64:
9c:9d:3b:24:91:64:85:b4:a7:a7:ca:6b:b1:d8:00:bb:15:e6:
54:e4:81:b0:57:7b:d0:d1:69:2c:6d:70:64:e9:8f:ba:ef:b3:
c4:ad:dc:82:ed:ea:06:3b:c6:0e:98:44:21:09:ae:0f:eb:81:
6d:53:f0:8e:73:3d:e4:ad:6f:a7:d4:0a:48:31:de:99:21:60:
f9:a1:e0:23:84:17:be:e2:74:b3:48:a3:cb:86:a0:a8:c9:f2:
9a:8b:b0:1f:d5:96:38:db:50:52:a6:0f:c5:7c:b4:73:e4:87:
5e:dd:da:dd:a6:57:62:4c:30:05:4b:6b:f7:44:32:b6:d0:69:
9c:03:c5:e9:e2:18:80:c6:dd:21:59:7f:67:46:02:8b:83:a8:
09:8a:81:82:12:d1:67:39:dc:8b:13:3b:f9:47:ae:ee:41:d6:
88:ac:f6:bb:07:5f:14:c5:d7:8e:bc:d0:6e:64:c9:53:63:1b:
45:a3:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:30 2025 by rpki-client