Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
File: 63884D122F5911EE8D896A87C4F9AE02.roa (raw, json)
Hash identifier: 2/gS1Ur7dJJf5ZDU1v4+87+nOeiqSxg5Qxi76bv6NNM=
Subject key identifier: 3A:F1:77:03:8F:D7:AF:2F:CE:E9:B3:65:E4:65:6A:DF:07:3B:64:7C
Certificate issuer: /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial: 69
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
Signing time: Tue 13 Feb 2024 06:38:25 +0000
ROA not before: Tue 13 Feb 2024 06:38:25 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4826
IP address blocks: 103.61.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Validity
Not Before: Feb 13 06:38:25 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65cb0e61-6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:77:c6:9d:22:bf:de:13:f9:94:7e:ad:4e:
40:74:64:4a:af:7a:a7:5e:60:96:df:24:a2:5f:a6:
0e:81:4a:34:26:32:14:02:bd:e1:1f:d2:88:b5:06:
0b:3b:53:57:2a:2c:d3:74:91:99:60:cd:19:4e:ac:
e2:66:0e:24:1f:c4:c1:8b:9e:32:f1:c6:52:36:28:
3d:f3:18:73:75:86:af:bf:41:1f:95:1a:26:04:04:
aa:78:2f:67:c9:06:48:a9:e6:66:e6:03:bc:ea:35:
21:b6:38:0e:eb:e7:60:30:8f:e3:06:9b:ba:41:45:
50:0e:f5:38:78:84:0e:d6:4e:54:f0:22:7d:3d:d2:
7e:b3:dc:35:b7:7c:9b:98:ac:37:88:45:35:2a:d3:
8f:4f:17:e2:17:3d:93:23:e6:ef:25:69:7e:88:e4:
ba:53:e8:13:19:3d:e5:14:39:7c:f9:fd:23:a6:e4:
e6:c1:55:b9:ce:c7:6e:11:d5:4f:38:72:0a:ed:25:
2b:87:d0:44:68:8b:4a:52:67:aa:c0:c7:f1:92:6b:
12:10:7b:d4:b1:96:84:05:77:36:a1:59:db:b5:4d:
04:10:c3:4f:5f:28:db:27:a4:8b:76:c2:79:59:6b:
e3:94:2b:e6:3a:3f:37:53:43:f2:91:53:f8:aa:15:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:77:03:8F:D7:AF:2F:CE:E9:B3:65:E4:65:6A:DF:07:3B:64:7C
X509v3 Authority Key Identifier:
keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/63884D122F5911EE8D896A87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.70.0/24
Signature Algorithm: sha256WithRSAEncryption
82:23:1b:c3:92:85:ac:0a:2a:f7:fa:ea:a6:89:f4:db:c6:f4:
e9:64:c4:b8:5b:fa:1f:79:ab:af:83:b5:41:2f:11:25:dd:5e:
b2:7d:ea:b4:8c:56:89:de:7a:64:be:54:2e:bd:6e:99:e6:d5:
b0:00:fb:e0:6c:ad:12:e7:2c:d0:69:07:22:99:37:1f:4f:d1:
1d:35:a8:ec:ae:f6:0b:57:8f:da:13:e1:ec:e6:da:58:4a:87:
0c:6d:c2:a4:4b:7b:cc:12:8e:c7:75:5a:10:ec:29:c1:10:4f:
33:60:37:51:31:9f:52:f0:e2:32:9a:7b:c7:ce:c8:01:83:78:
1d:19:93:34:5e:e1:af:9d:66:53:96:b2:8b:cb:c1:2f:21:93:
aa:8e:ea:bb:0f:87:40:c1:21:eb:75:9f:dc:d3:72:4a:88:33:
21:f8:11:89:42:f3:56:d0:36:7b:2e:c0:a1:59:db:92:74:64:
d6:f4:8a:0f:30:5d:19:6e:91:d3:83:9c:19:fb:b9:52:83:07:
e3:52:7b:67:3d:32:62:24:7f:61:db:2d:3b:70:5d:35:fc:ea:
8b:13:5a:fe:6a:3e:05:e7:79:fa:17:1d:33:7e:b5:05:04:fd:
25:2a:ba:cd:c4:d4:4c:01:0b:3f:05:6a:6c:10:9e:cb:f7:ef:
3e:1b:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:30:00 2025 by rpki-client