Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/EEBE377430C411ECBC8D1E20C4F9AE02.roa
File: EEBE377430C411ECBC8D1E20C4F9AE02.roa (raw, json)
Hash identifier: gELAt9yiLPHGU77JxUo41MHMLLX1cjc6sNjKaC37Byk=
Subject key identifier: 35:BB:BE:BC:1F:19:1E:6D:AF:98:86:68:5C:B9:42:9C:E8:05:BF:45
Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial: 0460
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/EEBE377430C411ECBC8D1E20C4F9AE02.roa
Signing time: Thu 12 Dec 2024 23:43:32 +0000
ROA not before: Thu 12 Dec 2024 23:43:32 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45753
IP address blocks: 103.203.48.0/22 maxlen: 24
116.213.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Validity
Not Before: Dec 12 23:43:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675b7524-354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:3a:51:7f:80:d3:8c:bf:bd:c1:07:1b:16:
58:67:ab:6e:8b:ed:e6:3c:a8:7e:36:78:b4:81:0f:
3f:7b:7c:36:db:93:af:31:9e:2c:48:85:11:b2:b8:
48:a1:07:7d:1c:f2:04:9a:05:a8:f7:f7:5f:05:97:
19:62:fa:af:ec:c2:b7:64:d1:8f:31:12:29:58:6a:
9e:a6:06:00:7f:a4:99:5d:67:10:0d:2c:3c:01:19:
9d:ba:1d:15:0d:22:ae:ad:6b:35:bd:38:11:c8:ae:
f0:10:4c:ad:fc:8a:e5:a5:91:93:e2:05:57:3a:68:
df:ac:87:02:b8:c2:86:c6:63:4a:4d:94:c7:8d:a4:
f6:22:bf:0d:ff:1b:c6:0c:ea:c0:04:fb:49:6d:4c:
f4:9d:b6:f6:3d:ef:fb:08:03:dc:13:2c:a2:16:4e:
1e:7e:fc:71:12:0f:21:4a:4c:65:ae:c8:aa:a4:f8:
c6:84:0d:a9:7f:1e:f5:02:61:0c:5b:77:be:c5:3e:
55:6f:4e:b6:31:ee:1c:e9:e7:6f:73:75:41:97:2f:
82:e1:30:28:dc:87:63:a1:82:82:d0:75:5b:30:3d:
d2:f8:8a:9b:af:a3:3e:e7:28:2e:4b:97:ab:d8:0b:
d7:01:d6:f2:5a:02:17:a7:dc:93:10:3d:0b:4d:34:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:BE:BC:1F:19:1E:6D:AF:98:86:68:5C:B9:42:9C:E8:05:BF:45
X509v3 Authority Key Identifier:
keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/EEBE377430C411ECBC8D1E20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.48.0/22
116.213.36.0/22
Signature Algorithm: sha256WithRSAEncryption
38:62:5d:40:d6:13:44:77:62:b6:4f:77:9d:ad:41:75:4a:96:
71:46:96:43:1f:c6:6b:9c:9c:8f:b0:51:a9:6d:b5:9c:fc:c0:
ae:11:3a:ff:cb:29:59:25:6d:84:9b:69:4b:d0:43:52:b3:53:
18:a3:07:f0:41:c0:62:d7:6d:dc:84:6c:f5:7c:0b:43:4f:8f:
c3:04:9f:9a:ef:bc:71:6b:f4:45:cb:48:7a:78:19:69:bb:38:
79:16:47:26:b0:a0:fb:60:28:a1:1a:6b:b2:1c:42:79:3d:68:
2b:ff:79:85:4d:aa:38:a2:4b:fb:a1:b7:84:97:2b:cc:62:d7:
97:2a:a3:30:a1:41:d4:e6:94:6d:84:2f:9c:5c:5a:ba:64:c5:
dc:a0:f8:cf:e0:30:7b:77:4b:a1:b5:2c:5a:95:aa:2a:be:9f:
18:bf:20:4b:15:06:ce:12:e8:c3:dc:f8:0d:9d:37:fc:82:4e:
39:e8:20:ba:97:e6:4c:e4:18:3d:5b:bb:d9:de:44:e8:8b:7c:
d9:73:9a:26:76:28:28:dd:2f:4a:9c:a0:22:cd:fc:d3:40:b7:
c0:02:71:02:16:c7:7a:74:50:dd:a3:18:53:e1:53:b7:0c:22:
d6:fc:7c:45:2d:3d:75:51:55:48:95:ee:8b:b9:dc:df:76:6b:
a3:78:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:17 2025 by rpki-client