Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
File: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (raw, json)
Hash identifier: Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=
Subject key identifier: 3C:AB:28:E1:9D:03:EA:5D:8A:89:A9:F9:0E:23:1E:11:CF:E2:57:73
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 0423
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
Signing time: Sun 11 Aug 2024 00:51:57 +0000
ROA not before: Sun 11 Aug 2024 00:51:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 142575
IP address blocks: 103.174.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Validity
Not Before: Aug 11 00:51:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b80b2d-8030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:0c:26:04:89:d0:12:4b:e9:c2:9a:df:6d:
89:b7:01:0d:46:63:88:7b:e7:3c:17:12:93:03:b1:
e5:11:5e:2b:e5:99:1e:ec:00:e1:e8:54:80:31:80:
7e:6a:6f:02:54:96:32:5f:04:2b:d8:3b:42:6d:d5:
7e:69:49:87:f7:25:03:15:26:ac:67:15:26:78:67:
c6:b4:e1:ff:82:81:91:3b:62:56:85:fe:96:1f:ba:
d9:19:e9:94:69:3d:20:9c:ee:0d:dc:a1:73:69:28:
40:80:f6:77:cd:e4:f1:0a:b4:a4:9e:8d:39:6b:31:
e5:c2:dc:e3:94:1c:94:71:e0:8c:1d:ca:01:8a:97:
5f:34:59:81:2d:e9:11:da:01:8c:5a:d8:bb:66:0e:
8e:b9:c2:22:43:22:88:0d:fd:11:9f:82:31:c2:bd:
ea:e3:c7:6b:6a:bc:5a:5e:33:76:18:ad:0e:3f:1a:
17:82:0c:71:a8:d4:d4:7d:31:12:af:71:28:f9:f6:
f7:c9:29:83:bb:f3:d0:72:07:a0:1a:f0:e3:61:3f:
60:1b:3c:7d:22:8e:3f:76:b9:9a:84:65:d2:36:d5:
5c:ec:39:5c:14:8c:16:98:ee:fa:56:f2:05:42:45:
eb:5c:8f:37:83:46:a9:df:fe:8e:70:16:8d:4f:ad:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:28:E1:9D:03:EA:5D:8A:89:A9:F9:0E:23:1E:11:CF:E2:57:73
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/4B95A58630B111ECAC3FE61DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:fc:13:f3:f7:26:01:7a:32:7a:fc:a2:96:9b:12:2f:f7:
59:b0:54:75:8f:76:0a:cb:ab:4a:8e:e6:06:d3:d0:56:69:45:
51:d1:2a:67:60:5e:85:c8:6b:9f:c5:01:9c:81:d5:94:46:0e:
6d:45:64:17:49:d0:77:6a:30:6a:b4:86:09:e2:78:a7:be:e0:
3b:2f:df:bf:a4:c8:e6:ba:76:41:7b:a4:67:54:3a:6d:60:cf:
24:00:35:94:62:5c:16:84:33:cd:8f:1f:f1:b5:fe:7b:a7:5a:
37:d1:08:eb:0d:54:3b:6a:b4:92:0d:25:56:83:85:cd:91:cb:
21:54:63:a0:96:19:48:4a:0a:80:f1:ff:9b:37:6d:67:57:bb:
03:ee:42:34:00:88:0b:0e:e8:99:75:c3:f5:90:3f:61:e6:86:
24:2f:2f:8b:a9:f9:e2:24:0f:e1:82:0e:05:d7:35:d8:71:f3:
d0:1a:26:5f:cb:d9:53:fb:44:ac:f6:8c:a2:9c:9f:b4:83:39:
6b:33:45:78:fc:8f:df:06:bc:9a:c1:4a:ef:65:6f:1a:fb:63:
7d:a0:2f:74:2d:9b:26:1f:41:b3:43:49:a3:61:8f:97:cc:fa:
39:a8:eb:6a:c4:22:d1:7e:b4:70:df:d8:e5:8a:08:1e:82:ae:
04:f2:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:26 2025 by rpki-client