Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa
File: EA531ACE61C211EF89F25E2CC4F9AE02.roa (raw, json)
Hash identifier: oNiAfDnKFd6E/eWe2/MsQzB7YHqKOuQqvUBoaG+F2qo=
Subject key identifier: 5D:F2:4E:FB:7A:67:9F:F4:1E:5E:B0:D9:5B:2C:1B:1A:B7:F8:A3:FE
Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Certificate serial: 0BC2
Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa
Signing time: Thu 30 Jan 2025 19:08:12 +0000
ROA not before: Thu 30 Jan 2025 19:08:12 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 60528
IP address blocks: 103.145.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Validity
Not Before: Jan 30 19:08:12 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bce1b-7665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:2d:b9:f8:eb:70:88:a7:26:d8:d1:5a:f1:
7b:29:bf:02:f7:be:a8:a7:ee:37:a8:0b:6f:dc:66:
5a:d5:7d:9c:73:02:d8:a5:da:9a:41:7f:0c:83:01:
84:35:0d:b9:a4:a3:26:73:19:65:36:ef:29:73:57:
36:95:3a:34:de:82:54:4f:d0:8b:62:d2:83:75:0e:
69:79:50:76:78:96:b4:4f:a9:f9:0a:6c:39:84:fa:
ca:9f:ea:7e:42:9a:df:3b:16:c5:54:8f:1d:d5:45:
ea:b7:8e:7e:19:6a:dd:7b:f0:0f:99:36:c5:58:37:
4f:41:2a:89:bb:4f:13:70:5e:ad:de:ea:12:f2:d4:
bf:6a:06:5d:84:ea:4f:2f:ad:f0:fb:c0:d1:69:3a:
fe:ba:54:a7:28:13:48:ab:13:57:15:c6:94:06:48:
7e:5d:36:b7:6b:1b:a7:7e:4a:c0:35:50:59:e2:3c:
de:21:11:2e:81:d6:be:0d:ad:91:57:c0:d6:d6:ae:
65:fb:e2:ca:26:1c:98:cf:92:c0:2b:7f:29:7b:e8:
a9:e0:90:56:ba:32:c2:57:f9:c7:79:9e:7b:8c:70:
b1:01:ce:e3:64:cf:c1:6b:db:b8:9e:b7:ae:62:4f:
0d:70:c3:99:cf:5d:78:eb:2a:52:c9:6c:b0:69:e8:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:4E:FB:7A:67:9F:F4:1E:5E:B0:D9:5B:2C:1B:1A:B7:F8:A3:FE
X509v3 Authority Key Identifier:
keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/EA531ACE61C211EF89F25E2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:12:3b:13:1f:3b:53:a8:54:6c:2e:c1:0a:7d:ec:fe:ed:4a:
dd:4c:e2:3d:79:43:04:d9:78:37:fe:6e:3a:91:76:43:77:15:
30:50:f0:2f:53:c6:e7:68:27:ad:89:a8:47:28:7e:52:3e:08:
db:39:e7:20:40:6e:fb:9e:7d:7c:14:8b:8d:9a:c9:13:5c:16:
3a:32:2f:25:82:6c:f9:68:c3:bb:1b:70:3b:de:d6:33:3b:71:
8c:00:84:9a:33:2b:08:c1:11:c8:c2:b2:2d:a8:72:f9:a2:a2:
3a:11:47:54:5c:ca:b1:b6:b9:b8:fc:ef:fb:3a:a2:f2:31:77:
33:bb:fc:88:36:87:97:03:ee:a3:d0:c2:b9:0a:ff:c3:a6:3a:
1a:e0:3d:bb:45:ef:1a:60:26:7e:7c:aa:95:70:d6:34:19:bb:
ca:70:83:a9:e6:f9:40:2a:83:04:3a:0d:fa:b4:90:ed:43:68:
78:87:6b:08:f1:e4:6c:76:50:fd:cc:ad:54:76:d9:e2:9b:e3:
e8:bb:87:4b:6b:8f:5a:c4:de:43:db:5d:56:92:14:c9:51:eb:
d1:e3:07:f9:57:21:66:5f:a3:1d:0f:f9:cd:73:d5:03:5f:8e:
71:77:77:b5:3e:c7:ab:be:98:c3:c5:f9:d4:c1:02:9c:9f:b0:
e0:e5:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:37 2025 by rpki-client