Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
File: E52DE77630B611EC981BBF1CC4F9AE02.roa (raw, json)
Hash identifier: Do6OgnR2E8Iy4DGGhWcszr7SeA/TupAI+DlFPIrWpNg=
Subject key identifier: E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A
Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial: 03EF
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
Signing time: Tue 21 May 2024 02:36:13 +0000
ROA not before: Tue 21 May 2024 02:36:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45753
IP address blocks: 103.89.72.0/24 maxlen: 24
103.133.72.0/23 maxlen: 24
103.133.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Validity
Not Before: May 21 02:36:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664c089d-7bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:ad:61:6d:e4:2f:05:e7:e7:e1:23:95:e9:
5d:55:00:3b:af:aa:cc:f7:1d:ff:2f:04:bb:4f:c0:
a3:b2:69:fd:cd:df:1d:cc:ac:08:af:c1:e7:1a:5c:
3b:d1:7e:df:a1:98:bb:fe:d4:e0:d3:7e:75:22:fb:
8e:40:0d:1a:ec:7c:44:3b:37:40:86:0b:5c:2f:bb:
51:a2:93:1c:44:26:af:ee:6e:98:27:c0:dd:59:a5:
47:cd:8a:10:09:bc:43:e0:ac:a4:66:fb:06:e4:34:
32:f9:78:d8:6f:89:9f:a4:0f:19:57:f3:d6:42:7b:
5c:56:6a:67:16:9c:5f:b8:34:06:0d:ba:6e:a8:af:
cc:ba:78:ef:b4:4f:bc:41:6b:32:a8:f4:88:40:01:
4f:3b:d8:58:7d:9a:36:43:56:b4:13:f8:5e:0d:02:
1e:a0:67:e1:83:40:21:b5:63:49:61:92:a4:05:39:
71:4a:22:83:0b:e7:e1:cb:b8:c8:75:88:27:da:6d:
3a:e9:88:88:55:e3:44:23:6b:9b:ef:5d:b7:fd:fd:
56:f4:57:15:11:fa:20:ea:9f:53:af:34:e3:3a:0b:
6b:9d:bd:92:cc:17:47:0f:41:03:86:0e:ed:cf:1d:
09:6b:43:f1:78:4d:6e:9b:13:c5:27:0a:50:9b:28:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CB:25:49:D3:30:9A:81:BD:A9:62:46:92:EE:92:89:75:B1:5A:8A
X509v3 Authority Key Identifier:
keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/E52DE77630B611EC981BBF1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.72.0/24
103.133.72.0-103.133.74.255
Signature Algorithm: sha256WithRSAEncryption
6f:b9:72:f7:b5:c5:d4:9c:49:9f:98:74:44:83:68:f9:ce:c8:
c6:7b:bb:ec:4c:35:8a:47:ac:c3:3f:fe:9a:89:59:47:6b:4e:
c7:bf:94:5e:0f:3c:19:0d:7f:07:7b:3b:22:ab:e5:4c:58:98:
ac:42:84:03:02:47:c4:b0:14:69:68:ae:6f:8c:f2:71:8b:d1:
01:59:5d:4a:0c:f5:b8:79:10:31:f3:14:53:36:50:7e:5c:83:
28:eb:46:6b:5d:57:db:5f:95:a8:aa:9f:b9:7c:59:de:eb:cc:
95:ab:cb:1c:0f:12:df:13:7c:47:6a:f5:65:82:89:80:29:31:
65:9e:a6:47:35:18:9f:89:58:f2:33:4f:53:4c:9b:21:31:6e:
a8:e6:b1:f4:97:2e:5d:eb:ce:4d:55:fc:b3:a9:4e:ca:53:b4:
b3:96:b3:f8:fd:0a:15:3e:b2:f5:fc:30:a8:50:c4:9e:70:5f:
1f:93:e1:2e:b3:4a:a0:f8:6c:e1:37:93:3a:20:8a:0b:a9:6b:
f6:e9:56:48:94:04:bc:92:5b:43:68:a0:8d:94:47:cd:10:86:
b5:7a:a0:59:0b:d0:65:87:c4:fb:9b:1e:96:df:9b:f4:1d:ae:
53:35:46:68:10:fe:95:d6:84:d0:45:40:7b:6a:73:47:95:ed:
91:53:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:15 2025 by rpki-client