Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
File: 5913DBAA01A011ECBFF72849C4F9AE02.roa (raw, json)
Hash identifier: 3U/rC7XZrIlBG0XwVGmCZckaH71UaJHcud5wgnrj7Ik=
Subject key identifier: 3F:89:6D:D2:F2:1B:04:04:1A:61:67:97:EF:3E:DE:3B:F7:CD:64:EB
Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial: 04D9
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
Signing time: Tue 31 Dec 2024 23:42:36 +0000
ROA not before: Tue 31 Dec 2024 23:42:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138340
IP address blocks: 103.130.140.0/24 maxlen: 24
103.130.141.0/24 maxlen: 24
103.130.142.0/24 maxlen: 24
103.130.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Validity
Not Before: Dec 31 23:42:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6774816c-320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:e0:6d:8f:7a:77:9c:7c:c8:21:c0:b9:c7:
3b:a0:9f:8e:13:4d:0b:99:63:b1:2e:2d:25:e4:45:
0b:80:ca:6d:d5:49:71:f6:03:74:30:c6:92:16:78:
c3:78:fa:f5:ec:94:c8:12:2b:b8:29:a0:bd:de:df:
66:06:94:7d:63:b4:cf:2c:d2:d3:0d:2e:2f:8c:4e:
55:ce:e3:c3:e5:7d:bf:f7:62:44:48:4c:d4:32:c3:
61:16:3a:3b:81:4a:3b:7e:9b:f3:34:63:d7:f9:d0:
ce:16:d7:7a:a4:f2:3e:93:a0:3d:fb:23:5a:33:f6:
b5:e8:b4:2a:82:a0:44:38:50:31:10:c4:71:23:13:
01:f0:1a:c4:57:89:eb:cb:8d:4f:a9:ec:99:a7:32:
2e:30:2a:46:87:8a:65:6c:f8:bf:89:9d:e0:1a:1e:
4c:3b:8e:7b:2d:b5:43:98:99:d3:d4:6c:2a:65:9d:
63:2d:b2:c7:33:fa:43:cd:30:82:26:30:af:7f:e8:
3a:43:39:3e:f4:c1:3c:7f:6a:26:05:53:4d:8a:0d:
59:db:52:ca:9d:9b:24:2b:ab:ab:93:b4:95:44:f1:
fc:c0:9d:83:ca:98:57:41:eb:78:a6:4c:f8:8e:89:
92:68:e9:fb:08:bc:aa:06:9c:07:84:5d:4b:7c:55:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:6D:D2:F2:1B:04:04:1A:61:67:97:EF:3E:DE:3B:F7:CD:64:EB
X509v3 Authority Key Identifier:
keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:66:84:1c:32:ec:f1:58:af:c2:e3:2e:31:de:9e:19:b1:71:
cd:0c:1e:02:7c:b4:b0:d1:86:de:c1:47:cc:20:f0:8d:ca:a1:
f5:bd:31:97:9b:1b:7d:e6:6c:3c:49:3c:cd:8b:e7:e6:1d:6c:
20:1e:46:b1:1d:b9:40:4e:1d:72:d4:6a:f0:18:6c:5f:3e:f8:
7d:2f:8e:8d:e1:77:59:d8:b8:98:8c:09:79:84:eb:91:df:20:
0b:61:a9:0c:da:5a:21:9c:08:e0:2e:cf:80:fb:70:d2:95:07:
a6:65:79:19:b0:bd:b8:36:1e:b5:35:b9:87:b8:a1:0f:cb:67:
bd:e0:f8:68:8b:05:20:61:eb:17:aa:97:e6:9d:f3:33:78:a6:
2d:c3:93:fc:88:39:93:cd:61:93:23:7a:e0:c6:8b:24:7c:43:
e1:27:f7:2d:23:dd:1b:a5:a6:e2:13:73:d1:47:fa:bd:ec:2d:
f8:70:56:06:bb:4d:aa:9c:63:fa:56:e2:e4:c9:d1:ba:23:1a:
ff:dc:4c:a0:a6:6f:47:25:0b:b0:0c:cf:a4:08:f5:4e:b1:94:
35:56:2e:98:d4:8b:92:35:a2:b5:e1:70:bf:55:12:cb:ab:a1:
b5:c2:45:b0:d2:42:8a:3b:3c:8e:1c:94:b9:a0:f3:a1:d9:6c:
bc:6a:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:00 2025 by rpki-client