Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
File: C33EB0EC7C4211EB933D233EC4F9AE02.roa (raw, json)
Hash identifier: d3qr5RqMQclwYYIrxTT2M2ZEqEhw3tr48jNwaXCY/ZQ=
Subject key identifier: 13:1A:07:F9:DD:ED:8F:6C:B9:17:DB:1A:31:BC:E0:7D:33:02:E2:DA
Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial: 079A
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
Signing time: Tue 28 May 2024 22:33:33 +0000
ROA not before: Tue 28 May 2024 22:33:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139039
IP address blocks: 103.138.212.0/23 maxlen: 23
103.138.212.0/24 maxlen: 24
103.138.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Validity
Not Before: May 28 22:33:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66565bbd-4dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:0d:46:16:b3:b3:1c:5f:37:26:0f:92:d8:
be:3d:58:08:ef:96:66:38:e2:4e:7d:eb:98:5e:76:
f6:11:6e:fd:94:b5:45:de:c6:98:db:ea:62:3b:3a:
e1:b5:29:af:34:2f:4b:12:b0:7e:a9:38:59:2e:24:
50:59:74:c2:ac:61:7c:19:2b:e2:ac:a1:19:ef:36:
bc:1a:56:23:0e:98:ac:a7:5f:7b:ca:07:ae:42:8c:
dc:79:ab:43:54:ab:29:86:9b:aa:03:44:09:92:92:
26:86:e5:a4:11:8b:27:55:7c:63:da:fe:de:e2:80:
ea:08:55:ef:d9:72:ec:51:3d:62:ef:52:56:8e:56:
5a:18:17:09:72:3f:03:db:7a:1e:4c:11:e6:e4:4d:
94:ce:f8:d3:3f:84:4d:c9:42:0b:be:83:89:18:46:
81:f2:3e:66:85:d7:fa:7c:7b:17:0c:99:d8:44:e9:
f4:23:14:a4:d9:50:d4:bb:14:98:a2:14:95:e6:c1:
89:45:f4:93:03:4f:6f:a2:c9:c6:84:73:b7:ee:8f:
db:67:52:82:90:0e:1c:ee:9f:b1:0c:da:97:39:64:
e2:c1:14:2f:c6:c8:61:ba:63:84:b3:cd:b5:21:ec:
47:f0:01:45:4a:76:30:29:f7:70:01:8c:05:88:9c:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:07:F9:DD:ED:8F:6C:B9:17:DB:1A:31:BC:E0:7D:33:02:E2:DA
X509v3 Authority Key Identifier:
keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/C33EB0EC7C4211EB933D233EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.212.0/23
Signature Algorithm: sha256WithRSAEncryption
34:08:38:6b:98:0b:40:09:b0:fa:70:c3:71:b2:a8:1b:b8:8a:
8b:73:b0:f3:e2:0f:cc:56:36:fd:c1:4b:6d:c3:7b:ce:3e:ab:
23:28:e2:ae:d8:c6:88:83:63:b4:91:5a:91:b7:84:c2:7d:13:
55:25:15:63:bf:e2:7e:2e:ff:96:08:8a:d5:9c:d5:2a:9d:6f:
e9:ec:9c:25:32:d8:85:58:46:6e:05:e6:8d:8e:49:c5:d5:0e:
bd:e2:a3:b1:86:f9:0f:05:86:bb:8f:a7:4a:15:4c:3b:d3:c4:
e1:78:89:56:58:a0:57:50:78:55:c4:73:5d:10:28:70:b5:7c:
48:ae:8c:e4:18:38:57:0b:2a:53:25:e8:1f:1d:5d:20:f7:88:
17:3a:23:b9:4a:34:6f:a3:54:9e:9b:e5:fa:ea:2b:f2:95:4c:
6e:9a:ed:7f:68:0d:e4:7b:d4:13:6d:37:b3:68:13:51:f3:3f:
b4:d1:30:49:5d:9e:9a:31:50:5d:de:fc:28:c3:9c:cd:7c:fb:
fd:10:6d:9f:49:86:eb:3e:56:85:b1:20:e5:a0:61:2d:3d:fd:
02:ee:19:98:4f:ac:a4:61:bb:94:6f:ca:f7:a3:d5:00:8a:8d:
b6:11:77:dd:cd:30:9d:ca:84:ea:8c:e2:ec:7c:1c:21:b8:87:
af:ca:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:13 2025 by rpki-client