Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
File: 4D4183A2D73C11EFB0F9227BC4F9AE02.roa (raw, json)
Hash identifier: herWewxhbd+Al2td5L8smiJ9gpdpuG0j6isOlm9UtaI=
Subject key identifier: 11:D0:5D:DD:2A:C8:B2:2B:C5:1D:85:F4:E7:3A:A9:B3:8A:88:62:6C
Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial: 1A
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
Signing time: Mon 20 Jan 2025 14:39:07 +0000
ROA not before: Mon 20 Jan 2025 14:39:07 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 398704
IP address blocks: 103.75.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Validity
Not Before: Jan 20 14:39:07 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=678e600a-bb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:bc:e1:b8:47:5e:db:c5:e9:b5:b1:d2:78:
28:86:84:17:d7:82:ac:95:e2:0c:7d:77:1f:21:d7:
75:b3:46:d5:c0:10:3a:29:f6:91:57:f5:09:52:74:
83:cb:e0:a3:ff:2a:4b:0e:75:a5:ac:96:ef:c8:b5:
10:9d:b1:c0:b9:a7:b1:b2:84:e8:9c:a1:32:b2:5a:
a1:12:d9:5a:11:50:5e:4c:f9:16:9e:50:57:95:3a:
75:01:d5:fe:ff:b9:2b:7d:cc:11:a9:90:18:98:64:
00:c9:7d:1a:e4:73:e6:89:01:c5:1d:92:15:3b:9e:
da:45:ab:e1:4c:e2:70:67:58:fa:b4:f1:3a:43:74:
80:ba:b2:e5:ff:1c:30:b8:b0:eb:76:62:ec:2c:7f:
c3:ce:39:65:74:d7:51:fa:f4:27:ed:54:06:ab:01:
e4:31:d9:37:55:ff:61:0b:e3:7b:e7:7e:ca:04:06:
4b:27:98:1a:fb:e6:b5:f5:10:f7:36:19:a5:e0:50:
f7:0e:42:ea:bd:90:4a:d7:29:a4:f4:3b:e9:62:68:
aa:de:03:bc:5b:1e:d9:73:0b:b5:20:97:cb:b1:40:
9c:3f:c2:b7:fd:33:47:b4:49:c3:8d:01:36:c9:e8:
37:bc:01:44:90:da:b8:c9:83:55:e2:45:13:a3:09:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:5D:DD:2A:C8:B2:2B:C5:1D:85:F4:E7:3A:A9:B3:8A:88:62:6C
X509v3 Authority Key Identifier:
keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4D4183A2D73C11EFB0F9227BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:23:23:79:8e:8d:10:03:4f:35:9e:2f:2f:66:83:54:c7:39:
88:ad:96:aa:85:d7:65:6e:05:4c:a8:66:c8:73:7f:f0:73:23:
fd:00:fd:da:b2:91:89:b1:35:d2:52:23:12:a2:98:51:59:87:
73:1b:61:bb:f2:97:31:fa:97:1e:07:87:69:d9:a0:2f:36:05:
88:88:be:a9:c6:cd:72:1f:49:67:e6:ec:60:72:96:35:5f:f9:
43:64:6f:1b:c5:10:c0:19:13:4b:85:03:c6:bc:6b:67:d5:38:
34:98:1c:2a:31:82:d0:f7:db:e9:a1:2c:db:37:dc:57:7b:f3:
4b:7d:50:f0:8d:ca:49:92:d1:07:00:12:75:4b:b9:4c:a6:48:
e0:75:d0:0f:72:97:f9:d1:63:8b:32:20:26:7a:af:fa:79:13:
7f:97:14:ba:15:32:52:ae:d3:a0:3d:83:33:6f:fa:c3:7b:a4:
45:39:4c:7f:0c:fa:83:56:8e:e7:52:97:bc:6d:7d:72:0d:c8:
85:96:bd:a9:09:f2:e9:4a:e2:25:c2:a7:ec:9d:7d:52:af:89:
eb:c7:86:c7:a9:41:85:cb:3c:2c:1a:9d:56:71:40:c6:09:c0:
ad:9a:69:1c:a4:66:fb:8b:7c:6d:1f:77:0a:6d:90:30:5f:88:
8f:ad:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:53 2025 by rpki-client