Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
File: 076948B2428E11EF912F3710C4F9AE02.roa (raw, json)
Hash identifier: TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=
Subject key identifier: DC:82:72:D5:46:37:66:42:51:A9:3C:D5:22:F1:2B:F2:FD:DE:7E:3B
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 0749
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
Signing time: Tue 08 Oct 2024 21:30:30 +0000
ROA not before: Tue 08 Oct 2024 21:30:30 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58601
IP address blocks: 103.243.80.0/24 maxlen: 24
116.206.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E
Validity
Not Before: Oct 8 21:30:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6705a475-dfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:41:49:be:c6:8e:20:65:69:52:24:71:35:
c2:b4:b6:ef:dd:62:e7:0c:1f:07:f4:fd:42:47:99:
16:c0:bb:d5:8e:a1:04:f0:1f:42:51:d1:8f:bf:2d:
b7:e3:71:4a:45:21:2c:7b:bf:cb:e5:fa:d3:6c:22:
8d:0b:74:c1:c5:10:ac:eb:bb:bb:28:b2:e6:e9:32:
9d:d4:91:ee:ea:6c:e0:de:0e:7c:87:f0:58:6a:62:
22:0b:80:e6:5c:f7:32:4c:22:53:93:f7:6b:9f:14:
23:8c:ce:ee:40:f8:9a:64:7b:a3:31:93:d1:a4:6f:
71:97:e9:99:ef:bc:2b:2b:0c:32:b5:6d:38:43:cc:
50:ea:ae:04:a3:9a:80:77:33:3e:35:71:7a:ac:67:
97:8a:2a:ae:f5:8f:4b:52:e2:48:bc:6c:dc:87:5d:
04:97:f8:91:ca:9c:20:75:b1:f6:35:26:42:11:64:
8c:59:5d:a6:ab:d1:ef:e7:ba:8d:1c:5e:0e:48:f3:
16:04:56:06:67:32:2a:0d:95:e2:93:67:1a:70:cd:
de:f5:d0:bf:9e:a1:3b:c9:5b:ad:8c:17:d1:97:7c:
6e:4e:db:83:d4:34:66:a1:cc:7d:22:12:85:0b:32:
e8:6f:1e:3c:ff:36:7a:66:7a:48:d5:08:c2:56:bc:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:72:D5:46:37:66:42:51:A9:3C:D5:22:F1:2B:F2:FD:DE:7E:3B
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.80.0/24
116.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3e:9b:bd:b6:b7:df:84:52:07:49:03:a4:1a:b2:4d:d5:17:
fb:ca:1a:32:82:26:9f:b8:cb:b9:2b:59:24:65:f5:d2:6a:63:
6e:57:4f:cc:8f:3a:e6:e7:d4:4a:db:ca:4e:00:7a:11:d5:ac:
2d:d8:eb:5d:cd:00:8d:63:e6:a7:48:b4:15:c4:ea:00:14:81:
4b:5d:61:db:f0:8d:31:8c:ae:15:fe:37:f3:a0:c3:9c:30:d4:
93:9f:6d:42:98:ba:eb:7f:94:21:ac:c8:3a:98:2d:a5:bd:c5:
e3:90:dd:50:2a:ad:a1:ec:1e:18:53:c6:0c:eb:10:2b:6b:6c:
4b:f8:f6:9d:23:72:56:57:01:7b:5c:fa:62:db:e5:9c:aa:ce:
81:69:6d:2b:a2:9f:96:fd:7f:de:78:b9:ec:d3:bb:cf:ec:51:
93:e2:88:be:9d:e6:37:cb:40:94:ff:4c:ab:ad:69:57:6b:f0:
95:b2:9b:34:81:30:27:50:25:25:38:cb:c4:57:43:1a:a1:cb:
53:d5:77:9b:35:7a:77:f0:8f:9a:d8:72:e3:c4:01:5e:b1:65:
81:e0:7a:1e:26:af:e5:5a:0e:6a:fc:5e:fc:b6:a5:d5:29:1a:
43:86:be:f9:92:7f:1b:7e:aa:cb:4d:cc:62:2f:b5:64:be:80:
40:90:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:10:02 2025 by rpki-client