Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
File: 5E037EB0BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: +8EcQRtYGMMQG5apafE7gXCQo6t5GPuzAGE56lGfraM=
Subject key identifier: 39:49:C3:20:87:88:E9:85:62:DE:B5:6E:48:8E:21:49:F1:AE:18:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:31 +0000
ROA not before: Thu 30 May 2024 16:10:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138747
IP address blocks: 103.137.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35903 (0x8c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:10:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4f6-ce14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:e3:00:7c:ad:77:6e:f9:bc:7b:6b:6b:38:
67:cd:35:d9:9e:0d:d2:73:d5:ea:75:19:67:bc:6d:
94:7b:ae:e3:54:1e:ac:09:74:2e:fa:95:57:f9:39:
3f:0a:16:f1:80:88:12:a6:4b:09:8b:15:e9:b5:ab:
d6:be:5c:e2:bf:6d:e4:8b:95:aa:fc:c5:46:58:c1:
88:dc:f3:fd:91:05:f3:9d:0a:ca:01:bf:c4:25:e4:
6a:4e:86:27:ee:b4:e2:eb:61:98:f6:86:fc:58:b0:
76:35:33:e5:c9:d2:96:73:a8:25:6f:cf:ef:6a:27:
07:98:46:e1:8f:58:99:04:87:67:23:4d:dd:22:1e:
6f:14:9b:ac:a9:7f:17:6a:9d:1e:b5:9c:41:63:78:
42:12:ad:18:a4:44:98:e6:2e:f9:31:59:6c:a1:ba:
c6:af:42:d5:24:0e:0b:f8:87:80:08:5a:c8:ba:36:
22:98:80:18:32:11:9c:6f:c5:6d:61:87:6c:62:5a:
ae:38:71:5f:23:6c:8f:22:48:a5:00:eb:ca:91:9b:
1d:ed:9a:f1:f6:e0:6f:fb:13:be:be:b3:9a:8c:d8:
ae:c4:a9:f9:f4:53:a4:e4:3c:4c:1e:68:a9:59:49:
16:be:73:08:e2:54:65:d2:01:13:37:0b:1f:19:80:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:49:C3:20:87:88:E9:85:62:DE:B5:6E:48:8E:21:49:F1:AE:18:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a4:02:80:23:fd:c7:a1:be:19:cb:e4:cc:b8:ee:3f:bf:18:
88:e3:2d:9c:fc:12:4e:e0:ce:7f:2f:c5:17:6d:5c:0d:3f:b8:
b0:f0:97:34:c9:28:6d:e5:c5:3c:ea:54:9e:53:24:fd:fb:da:
7e:5c:10:fb:7a:a0:20:1a:a1:d5:9b:ee:20:b0:a7:d6:53:c7:
ce:ca:5a:7a:be:ae:1a:61:a4:97:a3:5f:70:85:3d:ad:d2:f9:
4d:45:10:f7:8e:94:77:82:92:ea:1f:cb:7a:b9:b3:85:ea:59:
55:1c:59:4f:4c:41:c8:f1:f6:43:44:33:39:f7:d8:9a:76:41:
47:3d:c4:f4:06:78:57:54:3f:71:b9:d4:63:44:88:3b:d9:99:
55:14:8a:81:7f:4c:22:e1:2e:66:11:e0:fe:44:82:e9:fc:24:
ef:75:74:9b:8b:fb:06:fd:05:8e:45:19:84:3d:5e:c9:a0:01:
92:77:79:52:83:e7:de:f5:20:49:d6:ec:d8:40:ad:b0:5e:a1:
25:7e:ac:23:12:a6:82:be:7e:1a:3e:d2:ed:ca:04:54:d8:18:
42:5d:31:a5:a6:34:0e:b0:cd:c7:c1:f7:7c:55:5b:74:28:48:
3e:ef:19:51:0d:a5:d5:b8:4b:c5:95:f2:00:46:89:2c:31:32:
a6:82:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:36 2025 by rpki-client