Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
File: 58EB6F3E115511EC97960769C4F9AE02.roa (raw, json)
Hash identifier: o3kWnyNSxJFY3lvDnoQm9cCtMvw8qbOporWcpE2Yjl8=
Subject key identifier: FC:8B:B8:94:D3:C6:00:85:CF:93:4E:01:3F:DA:29:6F:11:CE:23:9A
Certificate issuer: /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial: 2532
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
Signing time: Tue 08 Oct 2024 16:03:20 +0000
ROA not before: Tue 08 Oct 2024 16:03:20 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 146995
IP address blocks: 103.237.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9522 (0x2532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B28
Validity
Not Before: Oct 8 16:03:20 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670557c8-9717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:16:57:f1:4f:b8:6b:a4:d9:a4:76:80:3b:
b9:96:f6:f8:f9:4b:7e:53:71:ad:9f:ff:b1:20:f7:
d9:1b:45:c3:4d:95:18:24:68:5b:ab:8b:cc:04:ad:
fc:38:6a:6b:71:da:1c:ec:be:ef:44:0c:ab:ea:dc:
6f:09:10:e5:3b:ab:65:30:b6:92:e2:4d:fd:c3:a1:
68:2d:66:c5:b2:94:a4:05:11:9c:23:bd:e9:f8:cb:
fe:e5:0c:dc:8a:51:8a:b1:43:32:d7:ec:43:27:e5:
83:9b:8a:b0:c8:26:b2:5d:3a:9a:6c:2f:86:c0:7c:
6c:3d:f9:bd:91:a0:12:ce:9c:bb:a2:da:30:4e:30:
04:a2:08:02:f1:60:17:aa:f2:4e:02:53:45:b2:d4:
5a:63:e9:f9:0f:c7:9e:ad:29:89:45:bf:30:d9:60:
8a:26:de:fa:92:b0:23:53:e2:9b:f5:3e:ec:73:3b:
c7:12:b9:12:9d:7b:b7:64:0f:8b:5b:fe:c2:79:d0:
56:84:8b:51:9d:f1:df:5a:83:dc:b6:2f:33:b8:1c:
14:59:b7:8f:36:c3:8f:70:b0:11:2b:99:f3:b3:05:
99:99:de:38:d4:dc:83:1e:6b:60:3c:6d:17:b6:45:
e8:65:69:9b:2e:eb:68:3f:94:33:fe:fb:7b:66:68:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:B8:94:D3:C6:00:85:CF:93:4E:01:3F:DA:29:6F:11:CE:23:9A
X509v3 Authority Key Identifier:
keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:df:30:bf:69:e4:b8:18:74:e6:3b:38:60:22:4d:07:2c:24:
5b:a3:e2:d0:dc:24:65:8d:dd:2d:55:1c:e4:93:83:25:dd:b6:
f3:38:21:d2:e7:75:e7:46:15:80:1e:89:f8:7c:6f:8c:37:ed:
2f:c4:b4:4f:71:63:6f:5d:ff:6d:50:09:df:c0:ef:89:17:c1:
de:dc:39:8f:d6:d6:80:3b:e6:d1:59:eb:e4:51:97:b4:54:ee:
7c:f1:e7:b0:1b:fa:72:a9:60:ff:e9:d3:3a:26:58:9f:dc:bc:
b4:20:d6:20:b6:13:bb:61:27:66:50:f7:20:b2:5e:27:8e:f4:
0b:a7:7d:45:e9:77:f5:89:11:12:3e:d7:70:94:43:5f:cd:89:
50:ef:95:07:94:50:e7:33:46:46:04:55:76:b5:25:9f:6a:4a:
21:b5:8b:f4:0b:b7:f0:81:c3:5c:8a:8c:32:07:f7:35:af:c2:
dd:8c:e7:23:e1:b4:f1:85:b7:db:3c:26:76:4b:a3:ce:02:bf:
3a:54:a5:92:7e:d1:41:36:66:81:8d:04:85:0f:58:91:3c:a7:
bc:f0:7c:5d:e2:cd:e8:c9:d2:bc:e5:d5:0e:4a:0e:1d:ff:8c:
ba:65:97:6b:9a:dc:4f:af:8d:54:af:31:35:62:5d:39:bf:92:
2d:7e:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:36 2025 by rpki-client