Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
File: EE89292C896211EA9036675BC4F9AE02.roa (raw, json)
Hash identifier: lA5e2mSPqe8KgSZZwnBXpDPyEahqBBJS32O+7JF2tPE=
Subject key identifier: D5:98:2C:79:BC:E6:87:C8:01:A1:CD:01:37:E4:FA:06:D5:84:E6:2A
Certificate issuer: /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial: 094F
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
Signing time: Tue 24 Dec 2024 19:58:19 +0000
ROA not before: Tue 24 Dec 2024 19:58:19 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.131.8.0/24 maxlen: 24
103.131.9.0/24 maxlen: 24
103.131.10.0/24 maxlen: 24
103.131.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912481E
Validity
Not Before: Dec 24 19:58:19 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=676b125a-749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:f2:ad:02:66:bc:0b:b5:56:c7:6f:d6:5b:
69:c1:48:39:b6:74:d8:5c:34:02:0c:3d:24:0b:99:
a8:d7:fe:eb:c0:8f:c0:f7:1b:64:2d:a7:22:55:63:
0f:ee:ab:3e:d6:ca:20:3e:5f:f9:9a:75:6c:7f:c7:
51:60:cb:7c:0b:f9:a0:b1:d3:c3:4e:f3:84:f3:67:
e7:37:8c:70:3c:5a:6f:4a:a8:7d:91:a2:61:6b:a5:
6d:bb:b9:e6:3b:29:eb:60:a6:b9:12:1b:c4:d1:ee:
f5:15:a8:6e:ad:71:3e:a3:65:ab:6c:a2:f6:b7:74:
e0:81:98:65:43:7c:d0:94:54:a6:24:f6:9a:9d:3b:
ad:da:c6:6b:36:3b:56:b8:1f:61:ef:f7:26:38:93:
01:f1:c8:af:9c:86:2c:7c:4f:27:19:72:52:67:67:
b0:a3:72:d7:b3:64:b0:61:3b:fa:94:fc:8b:34:0e:
b0:d2:e8:51:f3:12:01:42:25:44:ef:bb:3f:fc:94:
9e:3d:b1:c9:62:c7:73:08:46:d6:c8:51:f4:ea:fd:
a8:c6:3f:69:e2:6d:c6:cf:7b:4c:ac:0f:7c:26:b2:
84:a6:09:76:5a:b0:22:60:3f:d8:01:f0:3e:be:bd:
a5:af:ef:31:14:d8:84:f6:74:61:4e:2a:5e:30:ed:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:2C:79:BC:E6:87:C8:01:A1:CD:01:37:E4:FA:06:D5:84:E6:2A
X509v3 Authority Key Identifier:
keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/EE89292C896211EA9036675BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.8.0/22
Signature Algorithm: sha256WithRSAEncryption
86:cd:5b:83:e9:3b:24:08:1c:8c:4e:74:fb:d6:72:28:92:53:
55:ab:9f:89:82:b0:15:df:9a:16:00:f2:d7:73:1d:5d:66:e1:
64:a7:ea:56:db:0b:96:af:5b:d6:f2:99:16:30:e5:53:e4:c2:
e6:59:66:83:84:c2:7e:df:91:8f:d4:de:ab:15:68:5f:2d:23:
1b:63:50:ac:46:c1:8c:d9:b4:07:9a:ee:f4:45:b4:cc:45:7e:
e4:b4:26:c4:08:40:2d:c4:c0:e5:7c:56:89:55:0c:6c:dc:8c:
6a:bb:95:14:ee:1d:3e:81:2e:6a:76:7d:53:40:37:fb:df:52:
4c:8c:ea:b7:ce:bf:36:0a:f6:ad:43:e2:0a:b5:1c:57:77:94:
e7:b3:cb:70:5f:c3:2c:ed:2b:4b:8f:da:79:d4:2d:71:c6:b5:
c2:42:79:58:1a:87:58:22:36:72:e3:a6:0f:da:2a:eb:5f:4b:
6f:1b:8e:25:21:58:e7:a2:de:37:b8:46:7a:68:ed:fa:12:24:
95:16:25:1c:5c:63:23:55:25:4f:b0:f8:f9:16:98:62:59:ff:
bc:c5:1f:6a:54:e5:b1:d2:31:61:f6:c2:f2:ca:1e:1e:01:b6:
88:23:dd:93:6a:63:2e:79:2d:10:f1:81:ea:d4:3f:47:14:d4:
e8:cc:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:25 2025 by rpki-client