Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa
File: 63B80D12552011E9BA55007FC4F9AE02.roa (raw, json)
Hash identifier: fTPZgUpfkCrRNcsWrVhyFlyMxo5DlfFLB/9BRl5cziM=
Subject key identifier: 61:AC:6E:CD:CE:A3:48:DC:DB:F2:EB:7D:AF:28:E2:5D:0E:7C:E8:23
Certificate issuer: /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial: 0F23
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa
Signing time: Wed 10 Jul 2024 18:15:34 +0000
ROA not before: Wed 10 Jul 2024 18:15:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132236
IP address blocks: 103.8.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3875 (0xf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CA20
Validity
Not Before: Jul 10 18:15:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=668ecfc6-f232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:eb:d7:5b:ff:4d:a0:69:82:4c:28:8a:c4:
c0:3b:03:84:b0:d2:f2:29:00:ef:e8:be:66:30:43:
b9:10:22:13:6a:23:96:1f:f9:d3:5f:dd:36:94:a6:
ba:eb:4a:da:bc:6c:be:87:9b:73:c9:b1:14:fc:b9:
ff:b4:28:8c:08:d4:ef:6f:1d:2d:10:8e:1d:85:34:
0e:ff:82:8d:86:68:fe:5e:bf:ca:02:36:03:73:15:
4c:7e:37:ed:31:00:e4:19:f6:52:a6:94:80:dc:a2:
e1:26:0b:db:cf:57:9e:98:97:3d:46:b6:18:b4:3f:
13:6e:fc:98:a2:f1:df:d5:88:88:31:65:f9:33:3a:
26:23:a8:0e:da:dc:5b:09:2e:6a:14:d5:65:69:dd:
1c:86:95:93:65:66:35:b5:fb:94:27:02:ac:36:54:
10:0f:4e:3b:49:7d:23:53:b1:48:68:eb:d7:93:fe:
cb:83:00:14:99:98:1d:3b:ac:19:49:c4:ea:3c:b6:
99:81:11:92:53:6c:d4:73:9c:7c:c9:f7:34:6a:13:
8d:73:7a:45:9e:ce:d3:f4:f4:a2:f5:16:3c:eb:a5:
b7:0e:23:aa:7f:0f:6d:6d:be:f0:3a:cb:90:e0:cc:
6a:55:45:8c:0b:5a:11:b3:3d:47:c4:d6:68:41:11:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:6E:CD:CE:A3:48:DC:DB:F2:EB:7D:AF:28:E2:5D:0E:7C:E8:23
X509v3 Authority Key Identifier:
keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/63B80D12552011E9BA55007FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:3d:4a:25:00:f7:b7:ad:0e:29:0b:75:fb:54:bf:48:8b:ea:
db:92:f6:d5:6f:05:55:07:5a:9c:77:61:a6:0e:1c:a8:d7:29:
b2:29:91:20:8f:d2:d7:ff:c7:c3:ce:a6:cc:6c:cc:db:f0:08:
ac:69:ef:53:86:42:18:fb:61:e2:fc:36:4b:08:f6:e4:29:6c:
26:80:d0:6b:ff:b2:c9:17:e1:d4:b8:93:2d:66:a9:f5:14:cb:
46:bf:3e:3c:67:7c:1a:37:73:87:b3:50:67:78:61:e2:72:c6:
81:40:0d:7e:9d:28:1f:14:ce:de:d1:e7:3d:da:16:77:f2:7b:
3f:fb:47:6e:41:cf:83:d0:12:ad:ce:ad:4e:76:01:bb:3f:65:
c2:37:67:2f:dc:03:b1:59:99:83:15:ce:9c:4c:29:d1:20:eb:
55:e8:b7:ca:f2:4f:22:c4:e8:4b:d8:22:dc:aa:61:cd:cd:36:
d1:a3:0a:bd:0e:6f:c6:1d:28:6a:c0:90:f4:17:c0:88:2e:ec:
77:2c:2a:09:44:da:43:e8:5f:d9:4b:cc:22:b3:06:f1:d8:61:
0d:63:fd:3b:3c:7e:64:7e:41:8b:fb:82:7c:77:9a:e3:73:ab:
7b:ae:ba:d3:7b:91:85:10:5e:43:97:96:4d:8e:76:8e:16:4d:
74:d2:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:25 2025 by rpki-client