Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
File: 974F9BA0A87011EFB3944C13C4F9AE02.roa (raw, json)
Hash identifier: Z0OwaGSDmWf7G2/M9fK0ScdB4l7flLeNZz5L8C5FyB4=
Subject key identifier: 66:95:50:E5:A4:F0:03:8E:2B:73:48:52:1A:71:95:4B:2C:BB:B7:88
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 1873
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
Signing time: Tue 10 Dec 2024 16:54:00 +0000
ROA not before: Tue 10 Dec 2024 16:54:00 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 59256
IP address blocks: 103.39.238.0/24 maxlen: 24
103.39.239.0/24 maxlen: 24
103.39.248.0/24 maxlen: 24
2001:df6:9000::/48 maxlen: 48
2401:9cc0:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6259 (0x1873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Validity
Not Before: Dec 10 16:54:00 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67587228-a588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:4f:6c:68:79:c5:f4:55:09:fd:71:0d:f5:
52:f0:f4:c9:d6:7a:f2:3a:5f:7f:c6:f4:ba:8c:0a:
81:1f:4d:a9:21:78:74:04:dd:82:3f:38:94:b1:39:
da:df:72:88:0e:a6:7a:c8:bd:3a:5a:cd:e2:89:19:
2c:2e:d0:e0:65:d3:fd:3d:38:df:b8:58:f9:d9:79:
d1:a4:37:e5:de:43:82:3e:50:64:17:b0:62:8b:93:
00:0a:2e:72:60:b6:ac:b7:50:05:6f:5d:6e:ef:d9:
33:0e:b1:58:d2:da:d3:0c:82:9d:86:0e:74:1e:c6:
7d:54:71:d5:fa:09:ba:df:31:70:1f:36:5f:bd:8a:
c9:44:3c:02:24:d6:d0:89:c5:e6:95:5e:09:83:40:
69:9f:e8:98:e0:d1:3c:80:e7:52:4b:b9:f5:f1:f3:
0d:17:4b:b9:d4:aa:c2:5c:4c:14:c8:d9:d7:a1:55:
2e:82:c7:32:89:ba:b4:6e:c5:2d:fd:27:db:34:25:
f2:2e:26:71:69:45:09:47:a0:55:2e:bc:da:21:b4:
62:ba:2c:7c:fd:0e:01:a9:fd:f2:82:35:14:33:aa:
01:4f:68:b0:5c:a4:b8:7b:b5:5d:a9:71:f2:61:e9:
14:ff:cc:36:10:f9:16:3a:56:cd:a7:10:fd:f1:f5:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:50:E5:A4:F0:03:8E:2B:73:48:52:1A:71:95:4B:2C:BB:B7:88
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.238.0/23
103.39.248.0/24
IPv6:
2001:df6:9000::/48
2401:9cc0:200::/48
Signature Algorithm: sha256WithRSAEncryption
26:1a:7f:89:fb:69:e7:35:c5:f6:0a:5b:bf:4c:69:e1:85:0b:
1a:d5:ad:ed:41:5f:53:7c:04:28:bb:5b:81:24:49:7b:bc:53:
e7:09:45:ba:f9:02:62:0b:d5:ef:16:25:3d:62:be:a0:94:24:
17:9d:2a:67:9c:27:c9:02:7c:20:fe:a3:09:8b:6f:6a:cf:8c:
df:a4:9e:66:a0:3e:f3:49:42:0e:e5:af:02:c1:86:1b:1a:63:
ed:dd:af:cb:2c:28:c5:8e:78:81:94:64:80:f0:ee:7e:22:2e:
03:94:95:79:9e:3b:07:1e:19:e4:03:23:ae:c1:de:7d:81:8f:
57:06:88:89:ff:00:d9:c9:62:7b:61:65:8c:4a:1a:68:0e:9c:
d7:20:4c:5e:55:65:f2:67:bc:0f:99:ce:17:35:4d:96:65:fe:
a7:01:7d:07:a6:61:ee:64:f8:0c:ff:97:a0:e3:35:70:7f:75:
32:27:8a:53:c7:9f:4b:ef:93:67:79:92:47:d1:7d:78:42:59:
3c:2a:20:e8:25:63:df:08:2f:fc:15:5e:7b:73:a8:ed:46:4e:
f6:db:0d:31:57:32:28:c7:6e:75:87:5c:1c:ef:e9:80:e3:23:
03:2b:25:b8:f7:d4:a9:68:df:2a:78:76:7f:32:72:d7:e4:56:
8e:3c:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:13:36 2025 by rpki-client