Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
File: EC816CBE641F11EBA016EF13C4F9AE02.roa (raw, json)
Hash identifier: NtxjxHWZIfMo0Kt8OLvqFSbGnEdwJUbMVOZ3SZCghWk=
Subject key identifier: 19:FF:7A:81:F1:04:ED:54:2F:9C:E7:A8:23:CB:B4:1C:32:41:86:A7
Certificate issuer: /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial: 0674
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
Signing time: Mon 20 Jan 2025 22:11:37 +0000
ROA not before: Mon 20 Jan 2025 22:11:37 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.127.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Validity
Not Before: Jan 20 22:11:37 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678eca19-a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:a3:61:ae:be:0d:d8:dd:25:29:94:95:07:
2f:0b:bd:87:5e:35:e1:2b:db:48:cd:60:4f:9e:90:
53:3a:a1:43:1e:ac:35:a8:b7:ce:d3:a2:ca:cd:98:
40:81:aa:91:d8:11:f2:23:27:f5:45:3e:ff:13:23:
69:50:83:14:88:d4:e9:32:dc:af:f1:70:12:62:59:
44:bc:49:54:e0:9a:e2:ca:62:dd:8c:14:70:c7:c4:
46:50:6e:4c:2c:47:85:9c:24:c8:21:70:e7:86:08:
e4:f0:49:72:d6:c1:8a:d8:cc:4a:14:04:bb:61:34:
40:69:86:e8:09:dd:ae:4c:93:ec:8f:9c:40:9b:e3:
2e:a0:f7:b9:fb:26:3a:66:4b:db:33:44:06:1e:5d:
53:2d:42:54:18:2c:69:30:7d:f3:a7:8e:ed:44:e0:
44:24:e3:1c:16:9c:ae:cc:08:89:2c:0c:ac:0e:55:
81:95:36:b0:01:f1:5c:b8:17:70:78:95:50:fd:d9:
9e:27:c9:e8:86:73:95:95:cd:14:84:03:20:cb:8d:
1c:55:ba:24:ce:7a:fe:70:22:5e:48:6b:83:16:f0:
cd:f0:f8:0d:15:26:b4:6d:d2:f4:42:13:5a:55:c2:
01:c1:7f:e2:8b:83:53:1e:0e:bc:ef:aa:b6:c2:0a:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:7A:81:F1:04:ED:54:2F:9C:E7:A8:23:CB:B4:1C:32:41:86:A7
X509v3 Authority Key Identifier:
keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:44:75:e5:9b:7f:cf:aa:86:ce:06:36:e2:2f:cc:39:cd:66:
c0:08:13:ca:6c:8b:1c:d9:aa:9c:ca:f1:12:75:3d:fb:4b:84:
5c:f6:d1:8c:3a:64:39:88:ad:9f:0b:91:40:ed:e2:07:22:76:
31:f4:74:11:2e:7f:84:55:d2:69:5f:15:83:57:b2:09:ed:ac:
78:62:f9:46:4c:5c:8e:99:d4:c6:64:ab:f2:06:fd:b8:f3:ca:
7f:a3:35:d0:b4:fa:b8:05:de:f4:5a:b4:a0:1b:5f:30:78:c8:
ad:38:29:6f:f1:da:ec:a9:99:48:37:2b:7d:a7:ff:da:16:76:
d7:f5:52:6a:13:69:4f:cd:40:b4:e0:b0:e0:0a:c4:16:88:e9:
52:90:68:7f:1e:c8:d6:8c:34:31:d6:95:99:a3:4d:72:10:9a:
09:8a:14:20:ec:67:45:9c:1f:cf:49:30:96:8c:42:9e:c6:40:
2b:6d:3e:fc:e5:09:17:45:70:ca:39:73:ea:09:f8:3c:fa:19:
54:48:65:03:75:c2:fa:70:e2:2c:de:8e:4f:48:c8:7e:d0:6e:
e2:5b:39:d2:05:9b:96:73:13:75:2f:50:a3:eb:e0:82:ed:7a:
67:df:38:ae:d2:5e:51:53:bf:02:7f:91:90:09:9f:60:d3:9d:
58:d0:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:54 2025 by rpki-client