Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
File: 880C4DF80FE411EE90944D75C4F9AE02.roa (raw, json)
Hash identifier: ty5BYEXKZV5AWkkmYV4pnoWKf56lpR/zLBDndr/xc/8=
Subject key identifier: 2E:D2:1C:5A:06:06:85:E3:2D:C9:0E:45:D7:17:87:B4:99:9D:A9:49
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 084C
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
Signing time: Mon 02 Sep 2024 21:29:58 +0000
ROA not before: Mon 02 Sep 2024 21:29:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 4686
IP address blocks: 103.37.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Validity
Not Before: Sep 2 21:29:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d62e56-6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:2d:d3:7f:b5:23:09:47:c8:50:0b:92:fb:
40:60:01:17:ec:cd:db:af:ca:77:13:38:62:ea:64:
3e:bb:4f:d1:52:db:b4:9b:a0:5c:fe:a7:c8:20:29:
52:46:75:3b:70:25:69:c4:a7:da:d8:06:8e:8c:68:
50:0b:a4:c8:9c:03:9e:6d:e2:dd:d1:fe:88:c8:8c:
78:fe:33:22:9e:eb:4f:99:e6:d3:ed:b5:74:55:0d:
8e:c0:1a:0e:5b:e3:6e:93:4d:26:b3:f2:6b:8e:0e:
6b:80:6e:60:62:45:a5:57:73:41:7d:17:f2:e0:99:
06:95:64:0e:4a:1b:3d:82:85:6d:d3:d7:bc:d3:2e:
49:f2:8d:4a:ff:c4:37:58:ce:4b:93:e1:3b:28:f2:
49:04:ac:ec:8f:dc:b5:a8:e8:e5:79:fb:d4:29:cc:
54:12:fc:4f:08:34:3d:59:96:ea:c4:5c:6a:f7:a2:
a1:cd:41:eb:81:d6:be:b1:52:a9:cf:e1:16:55:af:
fd:29:1f:6a:82:ec:3c:9c:27:7a:5a:d8:3c:69:01:
bd:4d:f2:b9:e5:20:c5:98:e0:e8:c2:bc:ac:f4:7c:
ea:18:9f:39:26:7b:56:bd:02:7b:73:97:e4:ac:f3:
c8:70:65:d2:20:2f:8a:4b:2b:6f:13:56:62:5b:23:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:1C:5A:06:06:85:E3:2D:C9:0E:45:D7:17:87:B4:99:9D:A9:49
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.134.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d4:e5:7b:09:5d:18:03:db:42:50:52:7e:89:b6:cf:7e:fa:
6f:28:1c:18:83:d4:ee:ed:17:10:ad:53:d6:01:58:72:55:4e:
22:dd:d9:5f:80:6e:41:dc:d4:15:55:3f:b9:31:7d:35:c4:c3:
76:15:6f:65:ec:30:8d:c2:a4:94:19:45:07:2e:58:bf:0a:9e:
0b:e9:17:95:80:87:ed:43:00:b8:2a:c4:7f:0b:81:dc:52:ce:
4e:72:4c:9e:2a:1b:2f:f8:0b:8d:14:24:61:2e:bd:39:68:49:
ca:21:47:4d:4b:67:70:73:80:81:11:a2:b8:fd:97:d8:c9:14:
70:39:a1:9f:4f:db:e8:3c:33:18:d4:64:63:1a:66:a0:00:c3:
58:59:72:0e:ef:a9:cd:8d:02:7e:49:cf:16:5a:80:a6:db:89:
94:1e:d6:f7:62:93:5a:d9:bc:2b:a7:a5:5d:9b:69:dc:ee:88:
6d:cf:97:5c:f9:6f:c8:db:87:29:f3:15:d5:01:00:5d:2c:ad:
e3:9c:57:f1:20:22:4d:52:06:fe:8d:52:cd:1c:aa:9f:40:37:
dd:81:68:74:71:23:10:5c:3d:4c:90:90:74:d5:00:20:36:0c:
06:d8:3a:f1:c6:93:c1:c7:05:20:2d:98:ad:c7:d9:85:63:4a:
8f:1a:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:00:16 2025 by rpki-client