Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/EF1C408E00D011E984290942C4F9AE02.roa
File: EF1C408E00D011E984290942C4F9AE02.roa (raw, json)
Hash identifier: Gqfj8lGz1SFZyz34xcC0VfeJezoqMVPsLgjga+/PVxg=
Subject key identifier: BB:79:9C:BC:11:FF:1C:21:6F:BA:B3:F7:76:40:10:2E:64:E7:19:31
Certificate issuer: /CN=A914198D/serialNumber=DFA78706BEE5521A1B5B5145701E594F3C5D2096
Certificate serial: 1814
Authority key identifier: DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/EF1C408E00D011E984290942C4F9AE02.roa
Signing time: Wed 12 Jun 2024 17:48:04 +0000
ROA not before: Wed 12 Jun 2024 17:48:04 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137989
IP address blocks: 103.90.148.0/24 maxlen: 24
103.90.149.0/24 maxlen: 24
103.90.150.0/24 maxlen: 24
103.90.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6164 (0x1814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914198D
Validity
Not Before: Jun 12 17:48:04 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6669df54-40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:4e:f9:1c:33:0f:1d:1c:36:66:56:a1:de:
30:ad:5f:ce:32:e5:b8:94:7f:6a:98:79:60:b1:7f:
7f:8a:e0:2c:45:54:ca:20:5e:03:3f:77:13:e9:97:
f9:a3:26:ce:1c:c1:be:6e:0d:cc:05:b9:75:8d:24:
b7:7a:49:55:aa:eb:0f:d6:ef:d4:64:18:56:98:f6:
16:7e:32:79:e7:6c:65:51:1d:ba:98:5b:c2:ce:52:
0b:fe:95:24:99:d6:f6:12:2e:2a:15:b7:a0:d3:4a:
d4:5c:f3:56:c9:f2:e6:e6:be:c4:18:72:fc:61:8c:
4a:a4:17:2d:e4:56:fc:c5:28:e7:72:b2:39:ec:04:
75:df:79:a7:66:f3:26:bf:a8:b5:d5:17:3f:0f:8d:
96:f5:80:06:40:1f:c7:03:50:86:04:b0:02:c7:4f:
17:76:de:15:14:48:d6:d5:35:87:7a:f1:4c:b2:a9:
0e:56:59:b1:31:72:96:9f:f6:72:e4:5b:96:05:22:
e0:31:0e:4c:4f:10:7b:80:c3:d5:c8:38:ad:86:93:
7f:f7:c1:dc:c0:d5:7b:61:58:8c:10:87:b3:a0:6b:
a6:9f:95:09:f5:22:23:97:41:81:bb:0f:4a:35:95:
46:1c:26:c0:f2:3c:fc:d2:67:92:e0:01:f3:e8:b5:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:79:9C:BC:11:FF:1C:21:6F:BA:B3:F7:76:40:10:2E:64:E7:19:31
X509v3 Authority Key Identifier:
keyid:DF:A7:87:06:BE:E5:52:1A:1B:5B:51:45:70:1E:59:4F:3C:5D:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/36eHBr7lUhobW1FFcB5ZTzxdIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36eHBr7lUhobW1FFcB5ZTzxdIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914198D/AA5B9BCC92D411E7AF52487DC4F9AE02/EF1C408E00D011E984290942C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:95:e0:74:77:ca:65:ba:f6:85:6e:32:12:fa:61:fe:10:9e:
43:28:8d:78:43:01:cf:eb:6d:81:29:20:e2:5c:c6:32:f9:a4:
39:43:61:ad:c0:76:55:5b:1d:26:1a:c0:0d:0d:1a:0c:ad:48:
c9:eb:e0:c2:a9:25:2f:e5:f3:78:62:47:43:be:54:be:15:19:
02:66:5a:a5:07:51:4a:2e:7a:b0:cc:dc:4f:50:41:6f:36:de:
10:59:bc:cb:88:31:53:62:e8:00:0c:1f:d2:8e:f4:57:e4:74:
23:d6:8b:04:cf:20:d3:7b:dc:e2:1b:ac:01:2f:be:56:8a:f0:
60:7c:56:9d:a7:08:9e:e5:37:bc:7a:4c:64:12:67:7e:bb:c4:
07:3f:10:ca:85:a3:af:1c:0c:78:57:21:1b:85:3f:e8:9e:00:
f0:8a:77:2d:fe:9c:47:99:9d:96:fa:44:fd:e6:41:80:65:03:
40:bc:16:d9:d6:60:8c:85:03:64:72:a9:90:79:21:ec:5b:45:
36:c6:56:1e:18:9e:cc:69:48:24:49:58:41:b6:a9:10:9a:b1:
fe:89:c0:5b:01:ef:c8:c4:c8:1e:7e:5a:67:3f:92:73:79:27:
12:6c:9d:aa:60:7d:d7:93:7b:51:b2:77:44:49:0e:f9:24:32:
d9:71:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:02:52 2025 by rpki-client