Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa
File: 5EAB725014A211EEA889E832C4F9AE02.roa (raw, json)
Hash identifier: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=
Subject key identifier: F5:FF:2D:69:55:6E:02:FA:56:02:6B:11:E3:9B:D9:63:03:46:E6:AD
Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial: 0137
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa
Signing time: Wed 05 Feb 2025 03:16:19 +0000
ROA not before: Wed 05 Feb 2025 03:16:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150812
IP address blocks: 103.65.242.0/24 maxlen: 24
103.65.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D271
Validity
Not Before: Feb 5 03:16:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a2d803-1a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:e5:8a:68:df:3d:f6:f7:34:3c:d2:f1:d0:
cd:75:98:15:ab:7f:c9:08:68:48:78:96:8c:e4:51:
4d:b2:f8:19:15:71:e2:e8:2e:97:cc:92:e5:1e:14:
10:bf:42:26:09:fb:d1:ea:75:0c:a9:63:4d:34:8a:
39:aa:78:70:9b:e9:57:a0:a1:f2:d1:2a:59:93:d3:
50:6c:c9:35:47:58:b2:e8:95:2a:b1:ae:7b:bc:71:
30:0c:14:d3:45:12:84:f5:e2:d6:a9:c1:25:84:a9:
6e:bc:48:ec:d8:bf:1d:08:20:53:6b:23:34:ea:94:
2a:b9:01:d7:61:7a:d8:d1:68:4c:a1:41:b3:1e:11:
4d:53:d9:c4:da:ae:9d:48:ee:ac:03:76:99:52:61:
77:2d:d8:99:14:f9:40:e2:c2:a3:c6:21:24:07:59:
64:87:bd:5e:4d:0f:5e:c1:e6:15:cc:16:39:2f:8c:
6e:6e:ed:2b:49:48:2f:7f:50:b2:70:4d:8b:1a:f7:
6b:91:ac:cf:40:e3:0a:5c:3f:49:a6:49:9a:61:f6:
0c:1c:72:65:bf:1d:21:be:d8:ff:40:24:71:ec:40:
c2:7c:89:4b:cc:0f:e9:06:75:33:84:4e:eb:98:a9:
b9:c1:8e:54:3e:2e:70:4f:2f:bc:47:d8:5b:69:63:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:2D:69:55:6E:02:FA:56:02:6B:11:E3:9B:D9:63:03:46:E6:AD
X509v3 Authority Key Identifier:
keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/5EAB725014A211EEA889E832C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.242.0/23
Signature Algorithm: sha256WithRSAEncryption
49:f7:f7:63:63:a7:60:08:d1:18:a6:39:57:63:3f:13:24:4e:
ae:1e:18:ff:e5:18:9e:4a:c5:c7:bb:e1:e6:b6:a2:dc:80:61:
ff:c2:29:3b:c8:52:15:74:c0:af:c4:9f:85:21:60:4b:b6:05:
a8:e5:3c:8b:b7:b5:96:1c:82:4a:51:16:a4:32:30:5d:5f:51:
04:9f:ec:73:d0:78:27:f0:cb:37:79:92:dd:95:74:33:53:aa:
51:8a:7d:99:cd:42:f4:bd:f2:38:8e:0c:56:ac:01:66:53:2b:
ac:94:47:e1:fa:b0:2c:df:a0:af:97:a5:88:0a:5d:6d:b8:97:
bf:04:82:1f:ea:09:17:5c:42:41:4c:93:c3:6f:15:b6:4a:18:
7e:77:80:af:f3:2f:04:a8:1d:7f:c5:e8:25:e2:bf:b6:08:43:
de:ac:7e:0e:d8:4a:d9:60:ba:2e:33:fd:da:e3:8f:1c:39:c5:
cf:03:ff:df:89:f4:25:a4:b6:c9:9e:31:15:1b:1a:27:84:fc:
31:5b:58:6e:5a:eb:02:67:ab:69:dd:cc:04:4c:68:4c:34:3a:
bd:f5:9c:09:d9:80:1b:64:32:bf:37:a7:e2:3c:26:04:a3:22:
82:48:dc:dc:fd:89:44:a2:e2:bf:99:7a:e6:6b:db:d4:c3:13:
2f:80:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:19 2025 by rpki-client