Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
File: B5E806CC8BC711EE899A5284C4F9AE02.roa (raw, json)
Hash identifier: A9NER4RWLAzUHssj8hz2WdFFJOhX2P8OvSLz/oFPj9Y=
Subject key identifier: 24:2B:53:17:B4:C2:CA:E7:95:BB:C7:3A:4D:F7:61:11:6A:49:E1:F5
Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial: 0795
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
Signing time: Fri 12 Jul 2024 17:24:48 +0000
ROA not before: Fri 12 Jul 2024 17:24:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135407
IP address blocks: 103.19.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Validity
Not Before: Jul 12 17:24:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=669166df-8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:b8:59:6e:e4:72:51:5c:8f:17:4b:43:2e:
18:b6:a9:4e:48:7e:63:64:f2:72:d6:b7:67:2c:16:
dc:2b:a7:0b:3c:f9:f0:e4:3a:b6:a6:f1:50:a6:ab:
df:9d:2e:da:c5:81:bf:b6:7b:d0:fd:ca:bb:5b:42:
cd:e8:de:07:b0:5c:4a:08:7c:3d:12:05:f7:c7:d4:
02:2c:4f:5f:54:ec:12:bf:35:b9:75:29:96:e7:ad:
37:7a:a5:4f:56:81:44:2f:c2:41:40:0b:7a:5e:7d:
50:8d:b6:cc:1e:72:eb:90:33:6a:0f:14:2c:12:2a:
be:11:8e:38:55:4d:97:fa:4e:17:b3:a0:bd:aa:fa:
fa:99:9f:9d:0c:7c:7e:87:ee:b3:bd:6a:5d:18:b3:
a5:02:1a:31:a4:68:3f:bf:cd:cb:cf:16:ba:e3:f0:
32:ca:c5:79:cb:b0:4f:ef:df:6a:aa:4b:b7:83:d1:
72:56:29:a3:d2:21:fc:09:64:9b:3b:d3:8b:07:0b:
c1:88:b8:7a:d4:ef:cc:d8:16:e2:34:53:3d:16:44:
93:76:cf:17:13:f0:d7:99:46:19:40:4f:28:9c:a5:
34:b2:ac:13:a5:74:0b:50:6f:d2:71:6e:a6:b5:00:
ba:50:55:bf:bd:9e:72:34:f7:02:70:67:f2:1e:2e:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:53:17:B4:C2:CA:E7:95:BB:C7:3A:4D:F7:61:11:6A:49:E1:F5
X509v3 Authority Key Identifier:
keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/B5E806CC8BC711EE899A5284C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:25:6e:81:2f:b0:f4:da:e3:5f:f2:5a:c4:c4:20:c7:bd:e1:
01:43:00:fa:00:c6:7e:f0:4f:c6:59:98:43:2a:ee:3d:ad:fc:
be:c4:ee:ee:03:40:3c:a1:ea:8c:c4:25:6e:c6:4d:1e:70:69:
29:f1:66:55:56:a5:17:f4:d0:74:c9:27:0f:d1:85:92:a3:fd:
87:30:34:95:3b:fa:73:89:af:bb:a1:63:ef:40:ca:ab:81:fc:
6d:b3:0a:4b:58:63:94:fe:91:5c:d7:46:5d:20:e2:02:2c:66:
0e:c7:f9:de:a0:be:9e:80:ab:1f:3f:c5:71:ae:ac:9f:64:50:
d8:75:ac:01:45:39:6d:ea:78:80:4f:c1:55:f1:ac:31:ba:bb:
e6:08:a1:20:a5:39:b7:c7:d8:8a:4c:8a:61:80:bb:53:2f:3d:
66:0e:e7:42:94:7b:ad:26:10:e5:24:87:fd:e3:aa:ee:26:b9:
df:ed:45:d7:93:07:6d:d3:d8:c1:d7:6c:f0:6d:91:75:74:e5:
3a:5a:04:70:42:85:e9:7d:b3:17:b6:f1:28:a8:5d:a0:0d:ff:
d3:c0:70:b0:72:09:ac:f0:b0:3b:3c:7f:f0:25:05:91:0b:cf:
a3:2d:96:d8:32:29:18:e8:75:75:af:ba:48:a0:e2:f7:6a:0e:
f7:24:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:46:24 2025 by rpki-client