Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
File: A98932365ED311EF9DE3E178C4F9AE02.roa (raw, json)
Hash identifier: oF3VcsOsG2Zqk+IQ1vtZzq4bbG78CQjAlZHo1HK5yEg=
Subject key identifier: 3F:EB:AA:DA:3D:14:08:AA:4F:79:D6:34:0B:D4:1C:3D:FA:BB:CB:B3
Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial: 15
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
Signing time: Wed 04 Sep 2024 12:00:08 +0000
ROA not before: Wed 04 Sep 2024 12:00:08 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 59267
IP address blocks: 103.39.138.0/24 maxlen: 24
103.58.232.0/24 maxlen: 24
103.66.39.0/24 maxlen: 24
103.255.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Validity
Not Before: Sep 4 12:00:08 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66d84bc7-bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:fa:c8:54:8d:0f:13:1b:ff:fc:c7:a4:db:
9f:85:af:7d:93:69:e2:97:b0:84:d1:88:49:49:56:
bb:5a:84:d0:d3:58:16:16:ea:97:26:bb:2c:03:3d:
88:c3:40:c3:6b:ea:9d:5f:08:f6:a1:54:7d:fe:46:
2a:d3:fd:37:56:a3:bc:f1:09:bd:02:75:1b:b8:16:
41:08:af:ee:e7:c7:39:64:8f:c0:fb:12:3d:60:9b:
92:72:62:bc:8f:38:4d:0f:df:c6:43:ae:1c:b2:1e:
7f:a1:b8:7e:86:79:21:b4:10:d6:c2:00:16:0b:82:
6b:4a:8b:2a:36:14:82:5d:2a:e0:2e:c5:c2:4e:32:
59:40:a1:b3:f6:a0:51:f7:f9:56:b9:df:e6:75:ce:
e2:48:1d:dd:82:90:4a:0c:26:d1:fd:c1:ba:d7:74:
4f:3a:c4:aa:3c:3f:a4:01:70:3d:95:30:7d:91:cc:
d6:2c:0e:d4:18:b2:22:a9:0e:52:e7:ae:81:49:e7:
58:db:81:e1:c0:08:4a:bb:1d:ee:35:33:57:87:64:
e7:1f:2f:fc:79:d7:43:1f:f4:8a:88:7e:a7:9e:2d:
92:98:63:ab:1c:58:dd:54:a4:01:25:ca:b5:3e:0d:
38:33:82:2a:b7:e8:da:81:04:9e:f4:89:d9:47:18:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:AA:DA:3D:14:08:AA:4F:79:D6:34:0B:D4:1C:3D:FA:BB:CB:B3
X509v3 Authority Key Identifier:
keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.138.0/24
103.58.232.0/24
103.66.39.0/24
103.255.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8a:5d:eb:d8:e1:c3:63:98:7b:9d:52:d1:69:20:fd:bc:a3:
83:0f:4d:2d:4e:ef:f9:6e:f3:93:23:8d:39:eb:dc:51:70:94:
5e:4b:9c:0f:46:d1:6b:14:d4:52:6c:1a:49:8b:ef:1f:f1:c2:
fd:4e:32:15:12:c6:35:4e:2f:62:00:e8:6a:e9:b4:87:33:01:
eb:52:67:12:55:80:32:3b:be:c8:67:1c:4f:45:12:50:76:db:
65:40:d6:c7:08:e5:88:0d:ea:cb:3a:b2:ff:ac:a0:fe:c0:4e:
e2:7d:30:d6:08:ad:65:44:4a:cd:4a:50:0b:14:24:69:62:bc:
ca:c5:8a:77:33:63:93:af:37:25:d0:20:15:a9:4a:4c:55:20:
d6:56:a4:bf:5e:b8:aa:7b:4c:af:78:1e:6d:a0:a6:eb:dc:68:
94:16:70:b6:cb:f3:41:3a:20:a8:8c:21:60:12:0e:9f:21:d1:
51:b9:59:b1:be:02:d6:3a:0e:70:3e:31:f8:81:4c:98:15:5b:
a4:b3:2a:69:31:66:ee:72:74:8f:9b:ce:76:a9:9a:29:2a:a1:
6e:a6:e3:4d:6c:ba:bd:5c:71:e4:65:9f:e8:db:47:2b:2e:a6:
2f:13:c6:56:d5:20:26:e4:18:f7:ad:eb:52:b3:28:6c:f1:0b:
ea:4d:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:13 2025 by rpki-client