Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa
File: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (raw, json)
Hash identifier: 5O8DYgHc79V6KcmKNVHeX4W4dMmoUEhQnrmExgSqPEk=
Subject key identifier: BC:A5:CE:39:85:10:8D:60:DF:98:7F:48:AB:20:73:B6:56:09:CA:06
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 0F0F
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa
Signing time: Mon 12 Feb 2024 18:36:00 +0000
ROA not before: Mon 12 Feb 2024 18:36:00 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138584
IP address blocks: 103.133.200.0/22 maxlen: 22
103.133.200.0/24 maxlen: 24
103.133.201.0/24 maxlen: 24
103.133.202.0/24 maxlen: 24
103.133.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Feb 12 18:36:00 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65ca6510-165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:fe:38:fd:5e:98:a1:c5:db:08:39:59:96:
ef:f7:ac:b6:e9:ac:ca:7c:ac:1e:c4:ec:b7:00:db:
b5:fe:8e:1e:ae:50:14:38:bf:5b:e8:82:12:dd:7d:
6b:59:69:d4:d0:0d:fd:9b:2a:df:2c:0b:35:b8:fa:
dd:40:d1:87:cb:90:51:ee:3c:17:11:33:03:d4:2a:
1b:4f:66:2e:13:a8:b8:ad:b0:1f:8b:fd:1a:1c:d4:
c0:ce:19:72:05:ae:93:66:9e:3e:ff:b8:25:03:65:
ef:96:08:bf:43:13:0a:a3:91:62:66:63:e4:80:a6:
19:23:0e:bc:ba:e9:a1:ef:a8:78:35:35:e3:69:50:
d6:ca:95:a0:87:39:4e:cb:73:c5:85:25:53:14:40:
71:fb:d9:2e:fb:b3:dc:7d:1c:35:7e:fd:4b:c8:7d:
6b:18:30:d1:9a:b1:e9:d1:9e:58:1b:58:cd:d4:e0:
0c:a1:f9:2b:96:32:02:74:9c:9c:97:19:21:ce:7b:
cb:ba:20:f2:d1:eb:16:c7:0b:48:90:ad:0d:df:bc:
d3:1d:a1:32:ba:a0:f4:28:f2:ac:6b:2a:2a:26:14:
90:bf:60:2c:82:e9:b6:af:d1:dd:1a:dc:db:ac:39:
be:28:f5:40:0f:b5:1a:ac:88:d5:4a:38:b3:79:8a:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:CE:39:85:10:8D:60:DF:98:7F:48:AB:20:73:B6:56:09:CA:06
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:2b:cb:1e:94:64:11:e3:c3:fc:a6:ad:a0:02:53:d9:8b:08:
75:26:5b:23:24:ac:29:a3:6f:4e:28:40:18:57:3f:57:0e:d9:
e0:b9:8e:9b:b3:e7:7e:bc:8d:52:74:b4:07:ee:2f:8f:d9:04:
12:8c:3e:89:85:14:4b:90:4a:90:d7:30:af:2f:c9:6c:85:1d:
c8:15:f3:0f:a4:24:07:91:5f:17:d6:68:6c:03:7b:1c:42:ee:
f4:c2:98:12:f5:c3:eb:4c:ab:66:fe:1c:9c:1c:4e:f3:fa:6b:
ab:5b:f6:ff:00:7d:42:96:00:7d:de:16:c6:a8:df:19:57:41:
e2:6e:e4:6a:47:78:fc:5b:ec:4f:db:f5:13:f0:3e:bb:32:cc:
05:a6:1a:28:03:e0:08:7b:de:e4:3d:cc:ef:f3:9a:70:e3:83:
ad:94:7f:81:aa:40:a9:4d:f1:b8:cf:53:9f:99:5b:45:73:49:
60:36:66:ed:04:23:29:18:fb:ad:7e:4f:3a:24:71:22:87:12:
4a:5f:fc:3a:5d:c3:f5:47:c5:98:90:13:a7:9b:2f:1a:ba:2e:
76:8c:6e:cf:bf:25:b4:74:ab:15:d7:05:5c:87:4f:34:f1:9a:
bd:bb:d3:6b:06:ee:97:ab:d2:29:26:67:db:56:77:c2:e8:af:
dd:bd:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:53 2025 by rpki-client