Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
File: B53FD334575411ECAA094876C4F9AE02.roa (raw, json)
Hash identifier: 296EaDfJGmx3e6D5O8LxaSDfTjgH5YD0MQVWUb0ic6U=
Subject key identifier: 65:DC:93:35:88:30:F9:1B:79:49:B2:0B:69:96:29:7B:C4:81:00:73
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 25BF
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
Signing time: Sat 08 Feb 2025 17:55:42 +0000
ROA not before: Sat 08 Feb 2025 17:55:42 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 65535
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9663 (0x25bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805
Validity
Not Before: Feb 8 17:55:42 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67a79a9e-8522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:44:4a:a5:fa:3f:65:13:9d:76:f3:6a:31:
49:be:4c:ae:2e:e2:7f:83:59:f1:76:27:6b:98:5e:
e5:2d:e0:f8:32:24:f8:94:aa:a8:5c:3a:be:e5:35:
26:05:4a:df:1c:aa:ed:0a:81:05:d5:29:68:32:fb:
95:75:79:a1:95:33:d7:6d:c8:0e:0c:f3:a6:e3:7e:
f3:6c:eb:4d:47:f7:79:21:1b:40:01:4f:f1:ce:f4:
f4:7d:e7:9d:84:36:b7:ee:b9:11:7b:36:74:d7:fe:
d4:c3:b4:8f:60:1a:82:b2:df:a0:85:94:49:99:a3:
13:bc:09:90:8b:25:8f:61:6d:64:eb:47:59:c0:bb:
45:31:bf:62:c5:1e:e2:30:97:26:67:9d:1c:21:93:
6a:23:78:55:08:c0:09:c1:d4:d5:dd:05:fa:35:e4:
cc:1d:17:a4:26:7a:17:3c:27:15:fa:9c:77:31:aa:
1d:2d:53:d2:87:da:de:06:c9:1f:67:80:3e:d8:ba:
60:14:eb:fa:44:ab:bb:07:ca:a0:5d:b9:81:b3:02:
3c:9f:10:40:3d:99:ad:71:59:73:57:87:de:c5:7a:
e9:28:ac:df:c0:d1:e9:b2:a4:c5:03:34:a3:27:13:
3e:15:52:46:ee:b3:49:02:82:54:de:19:59:a8:d4:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:93:35:88:30:F9:1B:79:49:B2:0B:69:96:29:7B:C4:81:00:73
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:62:49:4a:0b:31:f6:03:3e:6b:28:23:ed:2b:e1:bf:cf:6c:
61:35:54:d2:c1:c5:6e:52:71:62:f2:71:93:76:0f:b9:3f:53:
2c:27:0c:ec:78:fa:8b:ff:7a:32:18:53:df:de:4b:e1:c1:df:
0a:a5:f4:47:c8:f3:ee:e6:e3:dd:76:3a:4a:18:29:6f:66:9b:
3e:4b:79:92:18:e2:1f:cd:96:16:9d:a9:80:c2:cc:48:6b:65:
d1:22:0f:18:22:be:f1:06:ba:d3:4b:04:2b:16:8a:13:cf:b1:
ee:73:a4:60:e9:e4:a5:04:ae:23:e7:3c:05:d9:a6:c1:32:6f:
32:d3:83:14:3e:0b:bc:38:df:a1:9e:52:e4:07:5e:88:ca:8e:
85:77:01:26:97:16:26:10:70:20:01:1d:1e:9c:f8:62:34:e6:
38:4e:ef:31:35:29:a2:cb:0d:25:fa:e4:c4:53:07:36:1a:e4:
72:ac:9c:19:4f:4c:84:9a:9c:a3:ec:fa:6b:4a:ba:2c:ae:5a:
d2:9c:84:a7:5a:aa:4a:bb:58:ef:6d:a1:f3:9d:8e:eb:4f:fb:
1a:88:24:f8:0c:32:f4:46:c2:79:28:10:ca:49:d1:51:15:6c:
9a:1a:6d:f7:f1:18:e6:54:f3:c2:09:c5:95:02:24:58:5e:4b:
2a:94:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:21 2025 by rpki-client