Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa
File: BD22841E9E4911E9A136D25AC4F9AE02.roa (raw, json)
Hash identifier: CD3KMyXKPVQJ5ERiU0fhGp4XONa4jeSt2SNuNzmurV8=
Subject key identifier: 77:E3:66:B7:FF:2C:32:0A:16:74:98:BB:37:B9:82:61:EE:81:05:93
Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial: 0DA9
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa
Signing time: Wed 26 Jun 2024 18:29:14 +0000
ROA not before: Wed 26 Jun 2024 18:29:14 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 58947
IP address blocks: 103.26.138.0/23 maxlen: 23
103.26.138.0/24 maxlen: 24
103.26.139.0/24 maxlen: 24
103.132.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3497 (0xda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Validity
Not Before: Jun 26 18:29:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=667c5dfa-1983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:5c:23:44:fd:aa:e2:16:cb:b4:29:6b:e0:
72:72:cf:f9:cf:e3:ad:72:27:f1:80:63:81:7e:03:
4b:09:cb:68:0b:c9:5b:ba:00:d5:bf:30:57:8f:2a:
31:07:cb:c5:a5:5c:49:2c:af:85:ec:95:17:4e:30:
1f:7a:54:a0:c7:9c:9b:6c:53:d3:dd:48:c1:6f:bb:
4d:ad:49:83:b6:4a:3c:0a:54:be:dc:90:78:78:9f:
47:04:fa:73:df:c5:79:fa:09:5f:0f:6f:fa:e8:be:
99:ed:5e:b5:bb:25:e3:76:46:be:49:90:ce:8a:28:
91:61:26:6c:d5:bc:65:e1:6d:d7:a7:96:88:19:80:
a2:bb:b5:f8:98:0e:f1:2b:fc:3f:a1:b7:34:d5:a5:
26:03:37:80:9a:39:89:f3:66:49:31:6f:7f:6d:f6:
77:aa:f2:c0:49:a2:94:40:0b:56:58:bc:de:fb:91:
9f:8a:80:41:28:89:74:1d:7d:71:a6:8b:3b:23:c8:
f6:28:66:4a:35:2c:c0:65:ce:02:f0:14:1d:f5:63:
a2:89:ff:36:63:e2:10:f4:a2:ce:f3:c2:44:1a:66:
dc:5f:81:89:72:4e:67:67:c8:65:41:12:fe:0e:d3:
a8:2a:e2:1a:09:59:eb:45:b3:95:da:cb:25:d1:97:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:66:B7:FF:2C:32:0A:16:74:98:BB:37:B9:82:61:EE:81:05:93
X509v3 Authority Key Identifier:
keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/BD22841E9E4911E9A136D25AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.138.0/23
103.132.153.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5a:77:f4:14:a0:e7:7f:49:0f:ad:dc:a8:e2:fe:f6:14:fd:
bb:0d:ee:82:9e:6c:df:a0:e7:de:20:32:dd:80:60:7a:26:e1:
ed:17:29:1f:2f:69:6e:6a:19:c6:a9:12:cb:84:25:5a:ae:37:
d9:ad:62:6c:5a:9b:29:c0:97:e8:da:84:7d:ae:8d:01:20:61:
65:96:16:55:a0:55:53:85:73:56:54:d6:3c:b6:ae:07:43:5c:
4a:b6:3a:9f:ec:f1:e3:7c:a4:df:18:38:2a:7d:19:eb:5d:bd:
ea:5b:a9:34:34:1e:8a:88:33:b9:86:bb:b8:a0:b6:32:f9:67:
cc:b0:aa:bc:ac:f1:76:03:aa:50:7e:cd:09:17:fa:a9:01:f8:
76:c8:c9:cd:c2:44:96:dc:85:a2:c7:24:ed:5a:3b:16:23:6d:
44:7a:24:6e:ef:35:3a:c5:ad:23:fb:c0:4e:cc:f9:41:40:dd:
2d:03:0e:29:55:30:4d:75:7d:b6:7f:33:df:cb:e3:4e:09:67:
3a:ee:60:6d:f4:bf:db:dc:60:c7:b1:1e:a0:98:2b:5c:43:c4:
04:a2:f0:7b:2e:7d:2a:e5:4a:1e:94:9e:54:29:60:c7:68:23:
ac:75:ae:8d:05:21:9c:d4:9d:0d:96:08:2a:45:96:5a:bc:79:
21:1f:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:36:41 2025 by rpki-client