Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa
File: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (raw, json)
Hash identifier: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=
Subject key identifier: 3E:4A:5B:E0:62:7B:3E:0D:9D:B5:15:C6:06:B5:7E:C8:6B:34:2F:E9
Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial: 0634
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa
Signing time: Wed 15 May 2024 00:03:32 +0000
ROA not before: Wed 15 May 2024 00:03:32 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139012
IP address blocks: 103.138.124.0/23 maxlen: 23
103.138.124.0/24 maxlen: 24
103.138.125.0/24 maxlen: 24
2404:cd40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A703
Validity
Not Before: May 15 00:03:32 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6643fbd4-2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:a0:d3:0a:fd:b3:9b:ee:7f:b1:f8:47:0a:
12:73:4a:f6:a2:f3:14:40:2e:ae:dc:84:4f:39:be:
c0:31:4d:a9:54:cd:16:d0:da:2a:7e:c3:4b:e8:18:
1e:88:23:b3:c6:cc:5b:0e:2d:5d:09:77:6a:14:e6:
5f:dd:f4:cf:2f:c3:ec:4c:70:df:00:8f:78:25:97:
5c:f3:6b:d5:b4:13:80:08:6d:13:f4:38:5e:59:57:
b4:a9:b5:f1:9a:03:78:20:eb:9f:cf:64:bc:ed:37:
de:13:5f:37:c1:46:68:ff:87:22:29:40:7f:17:a1:
29:48:84:f1:5d:98:ca:ab:86:de:ae:de:77:6f:f6:
06:2b:1c:75:64:6e:29:26:e1:f4:f8:2f:3b:d4:c3:
8b:5c:b8:e7:c2:b2:70:1e:c5:80:65:87:22:87:95:
cf:b2:f0:12:1d:86:0f:cd:50:1b:be:c2:97:c1:91:
06:27:18:45:56:e1:ac:e7:a7:bd:7d:43:e4:6c:1b:
61:a9:82:e0:b8:77:82:33:02:b1:83:5b:83:2c:58:
29:c6:31:6f:86:82:57:1c:3a:aa:91:c3:52:88:f5:
f8:f9:82:24:77:d1:f1:6b:cd:6f:7f:0b:c4:b6:a0:
0d:50:88:84:72:2e:ee:76:78:e1:15:bb:65:f9:63:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:5B:E0:62:7B:3E:0D:9D:B5:15:C6:06:B5:7E:C8:6B:34:2F:E9
X509v3 Authority Key Identifier:
keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/2B06C42E490511EB9EF9E26EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.124.0/23
IPv6:
2404:cd40::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c8:96:a7:e7:2e:c4:d3:ae:1a:e5:48:17:f1:93:e0:6e:27:
55:09:c7:2f:4f:7a:4d:b1:c0:d7:c1:25:a7:8a:4c:1b:9c:8a:
a1:3c:1b:0f:46:8e:b3:e0:c3:c6:e0:f1:93:e1:43:85:e7:2c:
b7:b6:52:e5:6c:35:89:f2:91:3a:1b:f5:ee:94:42:7e:2a:81:
8a:3f:85:b8:ab:40:8e:f8:e1:ca:c4:cc:2f:52:b6:70:18:21:
f7:91:49:ab:98:c1:5a:8e:1e:45:d2:60:81:6a:28:8f:11:8a:
37:d6:fb:2b:d9:e3:9c:77:fa:87:0f:dd:4a:e1:4e:79:a0:d2:
96:65:99:0d:da:10:b6:3c:12:a7:f7:3a:5d:3c:ad:2c:57:9b:
b0:ac:af:a7:36:53:6d:c9:80:dc:b1:4f:ee:22:dc:50:af:64:
68:40:66:c4:f9:ae:bd:a0:8c:d1:b7:27:6d:5d:c7:df:3f:de:
4e:a4:8e:89:42:30:ec:51:a4:5d:e8:44:0d:fd:f2:0d:87:ae:
53:69:65:e0:68:0c:12:bf:47:5b:10:b7:83:af:b9:6f:b7:43:
7f:d1:9d:10:fc:70:6f:e7:40:9a:de:5a:73:ec:7f:1d:00:f1:
08:b2:99:0c:ed:e5:ee:ca:e0:3d:d7:f9:6c:37:4a:da:a0:c0:
c5:0d:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:20 2025 by rpki-client