Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa
File: E5A47506DFCE11EFBC4CD631C4F9AE02.roa (raw, json)
Hash identifier: oAbHn+ZIVueY57m3XmFrOLBMGmy5b8O5gqzUSLNcsVE=
Subject key identifier: 8B:9F:91:79:70:9B:58:98:2E:B9:2E:B9:DA:1B:B5:35:38:D1:5E:8A
Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Certificate serial: 3452
Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa
Signing time: Fri 31 Jan 2025 12:28:38 +0000
ROA not before: Fri 31 Jan 2025 12:28:38 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 45193
IP address blocks: 103.39.252.0/22 maxlen: 22
119.252.123.0/24 maxlen: 24
119.252.124.0/23 maxlen: 23
119.252.124.0/24 maxlen: 24
119.252.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13394 (0x3452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44
Validity
Not Before: Jan 31 12:28:38 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=679cc1f6-94a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ba:3c:6d:fb:f1:d9:1d:fb:04:b7:aa:33:87:
b2:68:5a:ce:c7:bb:50:ae:98:fc:55:0b:2a:9d:66:
e2:4d:89:dc:42:9f:45:ab:28:0c:32:d5:5e:24:49:
28:62:48:4a:6e:44:6c:99:ff:f1:cd:91:e1:0a:d8:
c9:36:04:9c:54:38:f3:62:73:13:52:dc:5b:bb:6c:
d0:bc:dd:87:73:ca:f7:ff:75:6e:bd:bb:15:2f:ba:
67:e9:52:46:31:bf:d5:72:35:67:f6:f2:c9:32:62:
92:9d:39:c4:e7:0b:28:73:fb:f4:9e:23:5f:18:c7:
a0:02:14:6c:b0:68:59:49:07:3e:82:4b:fa:cc:a3:
73:de:a4:3f:3f:4e:53:43:e8:5a:fe:86:5a:4f:4f:
44:a2:90:e4:4b:88:e3:2b:02:3f:63:68:d5:bd:90:
68:79:52:2f:54:59:98:59:04:3b:5e:8e:b4:3d:06:
ec:44:6f:17:d3:87:2f:bd:77:19:20:70:9c:13:9d:
12:44:c7:d1:21:3b:50:95:19:ab:c0:8b:e3:e6:e5:
32:06:80:2e:82:58:c9:bc:16:e7:f9:1e:6e:2b:33:
f1:ed:a0:21:79:10:dc:c1:08:56:c8:80:13:d0:0f:
5e:cb:9b:95:a6:89:3a:e1:41:51:f8:82:7b:e3:4f:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:91:79:70:9B:58:98:2E:B9:2E:B9:DA:1B:B5:35:38:D1:5E:8A
X509v3 Authority Key Identifier:
keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E5A47506DFCE11EFBC4CD631C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.252.0/22
119.252.123.0-119.252.125.255
Signature Algorithm: sha256WithRSAEncryption
49:3f:d2:aa:0a:6f:52:fb:d7:1e:37:20:72:99:a4:9b:86:6e:
ab:3b:be:cb:fb:d3:72:73:b3:f5:ec:4f:25:0e:ba:e5:96:60:
86:01:aa:16:20:73:14:51:bf:5a:91:ae:3d:f5:83:10:4c:0c:
d7:54:69:d8:c7:a4:f3:2c:25:68:bd:c3:bf:86:56:46:5a:0f:
8d:f5:12:dd:72:33:35:46:84:b1:5b:4b:7c:1b:89:4b:93:c4:
8f:71:62:cf:94:16:75:33:c6:92:ca:fd:2b:bd:9c:f4:62:36:
82:a7:02:ba:8e:ad:d8:7b:e0:15:1b:d5:c9:a9:41:8e:a4:67:
7d:e7:31:d6:50:06:07:e5:6d:63:d0:41:2a:61:f0:2f:86:60:
f1:66:bc:ed:62:32:f0:92:99:13:72:4c:5d:7f:7e:82:f5:55:
25:26:03:e8:54:87:f6:78:36:6a:bb:b1:25:0c:f1:b8:8b:eb:
17:d3:65:38:45:e9:16:f0:08:ec:1e:bc:52:10:0b:97:79:cd:
85:61:82:3a:5f:73:fa:44:96:ad:20:a6:d7:d7:c3:8c:8f:28:
3c:a4:f0:54:60:f2:80:bf:71:44:89:35:c7:e6:6b:ec:fa:24:
a6:93:69:d9:0a:16:a9:95:47:d9:3c:19:98:2e:10:a3:1e:7e:
db:00:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:39 2025 by rpki-client