Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
File: EBD40682641F11EBA016EF13C4F9AE02.roa (raw, json)
Hash identifier: c+WQzSJXoshc9k6/pfga0XXEDax9tj8GwJo473Lwjss=
Subject key identifier: A6:65:A1:2A:DD:41:E1:73:BF:43:2A:A3:7E:7D:CB:4D:C5:6D:B0:59
Certificate issuer: /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial: 0673
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
Signing time: Mon 20 Jan 2025 22:11:36 +0000
ROA not before: Mon 20 Jan 2025 22:11:36 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.127.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D84D
Validity
Not Before: Jan 20 22:11:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678eca18-ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:df:fa:28:d3:56:39:61:94:75:fd:94:15:
b0:ba:86:0a:bc:80:b5:ea:43:b8:09:92:72:42:e4:
10:de:99:f2:b6:d4:a7:17:2d:3d:ad:65:f9:6a:92:
35:fe:46:f4:03:0a:aa:ec:4e:1a:90:a8:b8:a5:95:
0d:1c:33:f9:4e:81:45:e5:f1:04:a0:57:f7:69:f7:
6e:3b:7c:7c:d6:ef:74:36:c8:95:ee:41:84:0d:e3:
03:c8:32:e1:3f:c6:de:3b:be:8c:c3:b9:7a:e7:6a:
95:ac:15:a8:f5:d4:54:88:37:7d:e7:cc:9e:28:2c:
27:75:a9:d7:1f:bb:b1:11:c1:56:9e:88:94:14:27:
1a:cd:bc:d2:91:02:9d:a6:01:68:f0:10:57:d2:31:
6e:9c:d2:66:10:d4:93:9a:33:27:f6:61:c6:67:19:
06:98:37:25:65:e9:1d:70:7f:77:c0:1e:b4:33:fa:
16:3d:86:6b:6b:5f:30:cb:f6:e0:1d:d0:cb:b0:42:
81:ca:90:c2:05:3e:d7:85:0a:ee:2c:5b:07:6c:6b:
74:f3:a9:f1:b8:bf:55:a7:55:b5:69:0b:94:f8:a5:
4d:85:29:84:86:2a:c0:d6:9e:4a:11:d2:5f:05:25:
f4:ab:e2:5c:d8:e8:92:07:2e:83:3a:12:df:28:c4:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:A1:2A:DD:41:E1:73:BF:43:2A:A3:7E:7D:CB:4D:C5:6D:B0:59
X509v3 Authority Key Identifier:
keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EBD40682641F11EBA016EF13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f6:31:a3:2b:7f:8e:1d:a1:f1:ce:eb:e1:53:35:89:f1:45:
c5:4c:a1:d8:dc:6f:a3:30:b8:e2:3f:b5:da:4b:3f:66:73:ab:
1b:4c:89:9c:5f:26:92:e2:6f:c7:0d:71:8a:18:71:2a:cb:be:
1d:dc:ea:7f:1d:3e:53:c9:d1:1e:1b:f1:70:ae:96:b7:89:3b:
02:af:b3:cc:ae:a7:6f:ba:a7:26:f0:f5:d9:a7:f2:7c:2c:2e:
77:10:34:46:c1:ae:fc:ee:96:a7:05:bd:23:af:b2:f7:72:0b:
7b:bd:38:be:50:46:a7:2c:76:e8:8c:c8:a0:61:a7:91:74:5d:
d2:09:21:f3:3d:df:68:2a:30:11:da:14:a2:90:02:ac:c2:63:
85:a8:17:d8:d5:3c:0b:10:dc:b0:34:09:a5:08:1a:39:dc:e9:
35:ce:4d:43:9c:1d:46:2e:f8:2b:ac:10:53:49:25:8c:d7:7c:
3e:4e:9b:8e:4f:87:40:2a:66:f1:62:d5:d9:03:d4:47:ce:75:
75:3b:a1:c0:8e:cc:ff:ad:09:e2:45:a8:87:ec:c9:00:76:d6:
f2:cf:a6:02:95:55:19:ed:b0:dd:b2:6a:86:4f:ff:3a:62:08:
32:2a:77:88:2f:57:a4:e4:20:cf:de:32:d6:0d:91:52:78:ba:
3f:3c:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:34 2025 by rpki-client