Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
File: 51D4585A89B211EE9ADA615EC4F9AE02.roa (raw, json)
Hash identifier: 2pLBfFEzGVtLv2cMeVGOzUnHFe1Jg/DT2E9SEr2vDd0=
Subject key identifier: 95:62:EF:3F:7A:3A:F8:C2:4E:10:1B:BF:73:13:17:A0:4B:25:AD:A5
Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial: 8E
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
Signing time: Sat 17 Aug 2024 06:27:37 +0000
ROA not before: Sat 17 Aug 2024 06:27:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137923
IP address blocks: 103.117.81.0/24 maxlen: 24
103.119.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Validity
Not Before: Aug 17 06:27:37 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c042d9-3482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:a8:45:3a:10:73:1b:c6:a4:8e:1f:ec:a1:
a2:55:1c:ab:76:e4:5b:f5:b6:97:d1:70:63:50:75:
1a:d1:a6:20:84:b9:4e:17:3d:4b:cd:9b:2b:f0:1c:
1c:f0:14:cd:2c:1e:5d:e2:63:e1:01:a3:f0:0f:3d:
36:d6:55:38:bd:a1:77:15:86:e3:d6:60:69:77:9e:
8b:9a:54:be:e3:6b:b3:6f:10:99:60:1d:1b:c8:b8:
00:a2:d0:b0:3e:44:8b:cc:1e:e1:1e:7c:0f:39:bf:
2e:6f:e2:ad:a2:da:40:bf:e2:e1:31:a4:46:62:f2:
61:08:ca:41:54:2d:8a:ad:aa:61:62:c7:48:f5:9f:
9d:89:ed:d0:08:0b:87:e6:6a:90:a7:54:af:8d:6a:
4f:ad:ac:59:de:f8:a7:86:7e:38:78:5e:cf:62:5f:
3a:2c:30:6c:0b:c4:75:20:c1:b4:11:6f:d1:82:7f:
85:77:3f:b3:3e:72:89:ad:7b:62:5b:dd:51:c5:87:
79:d0:91:98:85:bf:2d:28:87:0a:54:6d:36:2f:0c:
8c:9c:32:04:b6:31:47:c9:e7:b2:f5:83:a5:42:a2:
8e:1d:e0:9c:09:04:ff:85:bb:10:23:47:43:16:e1:
65:64:1a:ba:fe:df:70:75:71:38:0f:ae:29:f6:21:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:EF:3F:7A:3A:F8:C2:4E:10:1B:BF:73:13:17:A0:4B:25:AD:A5
X509v3 Authority Key Identifier:
keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/51D4585A89B211EE9ADA615EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.81.0/24
103.119.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8c:70:6b:e9:10:30:96:b3:9f:c7:20:4c:dd:94:84:83:9e:
fb:d2:5c:88:f0:b2:74:dd:f6:f9:eb:b0:49:20:f4:87:09:c6:
39:90:c1:20:6d:dd:4d:99:9b:4d:7b:3c:1c:21:27:67:38:a3:
09:f7:d9:70:5a:99:2f:e8:6e:bd:33:9f:81:df:56:ba:29:82:
0f:a4:11:05:03:9a:c8:02:ee:22:0c:13:09:90:61:a1:42:44:
ce:be:6f:b3:90:a0:8c:76:8c:f3:42:d6:c9:26:f0:40:89:b8:
61:b6:f7:7f:f2:fc:bd:50:c8:cf:1d:e3:41:11:ac:c9:e9:61:
78:e0:46:0d:23:6f:a9:1b:4a:a8:cc:c9:dc:ad:ef:c5:e3:fa:
81:70:33:04:f2:d5:18:bf:97:62:11:05:92:63:41:ae:e5:a0:
25:74:9a:dc:7e:78:69:84:18:72:e0:3d:5d:33:62:49:04:2e:
a8:f1:20:a7:87:5b:8c:02:5c:6a:fd:d1:36:5f:37:c7:18:c7:
7b:a5:0b:11:c8:e9:f8:5b:69:df:4b:93:1a:af:88:96:a2:f6:
02:e7:2a:f6:97:93:31:5b:d1:23:93:cf:04:73:25:6f:68:a4:
c6:a3:a3:fb:53:04:7b:f3:91:b4:38:c9:97:dd:30:f0:eb:cb:
42:60:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:59 2025 by rpki-client