Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
File: C130A016889811EE8EB03D6EC4F9AE02.roa (raw, json)
Hash identifier: ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=
Subject key identifier: FB:78:4A:6E:02:78:72:8F:29:1E:1E:11:AF:79:BD:5C:E7:D0:D8:3A
Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial: 0760
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
Signing time: Wed 18 Sep 2024 21:40:30 +0000
ROA not before: Wed 18 Sep 2024 21:40:30 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138197
IP address blocks: 103.155.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A3E6
Validity
Not Before: Sep 18 21:40:30 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eb48ce-5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:45:95:5a:57:1c:f9:2e:82:13:75:af:aa:
d8:01:33:4b:fd:16:43:40:73:7b:31:7b:42:9c:5d:
9a:cd:e3:ea:53:9c:99:c7:dd:81:29:cf:52:22:87:
a7:4f:f6:08:00:25:5a:1d:0a:fa:6b:6b:f4:61:e5:
93:8a:ed:63:ca:1d:8f:e9:ee:10:a5:76:d1:86:63:
17:15:f9:64:44:23:78:a8:54:0b:62:bc:27:12:f6:
04:57:0f:12:0f:ae:26:96:22:fc:5e:30:ce:1a:dd:
7c:f7:68:9a:4b:78:68:32:37:6f:2c:2d:52:2b:54:
eb:b5:30:eb:a4:2c:5b:66:34:1b:3e:d6:db:d5:64:
33:38:e5:8f:9f:f4:ff:07:03:de:07:12:70:ec:20:
f4:b1:1b:ea:c5:ec:1a:db:06:59:36:2d:02:7b:62:
be:cd:32:99:8f:39:23:47:6d:5c:03:20:8b:cd:d1:
9e:0f:fe:0f:a5:90:78:99:75:d1:e6:18:0b:0a:e3:
76:2d:5c:1c:58:4b:ce:d0:a9:41:de:2f:37:58:bd:
53:7c:d7:72:e4:3f:80:df:70:3d:8a:3d:e7:4e:56:
7e:2a:5d:c3:c3:9c:03:2f:43:ac:b3:66:2d:51:75:
ad:b9:74:ca:09:16:c5:cc:b9:6a:06:27:2b:81:5c:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:4A:6E:02:78:72:8F:29:1E:1E:11:AF:79:BD:5C:E7:D0:D8:3A
X509v3 Authority Key Identifier:
keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2b:46:32:d9:4f:0e:1f:08:7d:ec:73:ae:f9:a2:f5:9d:18:
71:71:8e:81:6f:50:a8:ff:00:69:ee:e6:f4:d6:80:40:85:52:
93:b2:4a:fd:9c:d2:b2:d8:5b:13:9a:f7:43:ee:bd:3c:be:be:
96:9d:09:b9:7f:29:24:85:0f:2c:e9:3d:7b:13:0e:16:ea:db:
97:1f:0a:ac:f8:f5:8c:85:43:75:98:a6:e5:6e:5d:b8:89:61:
09:c7:52:17:04:06:4d:eb:8f:c3:2f:a6:6e:e2:fe:27:e1:cb:
e8:6c:af:09:00:6f:e9:dc:4c:f9:a6:30:e7:80:d1:64:c5:86:
55:73:be:31:2a:d3:ef:cd:dc:cd:68:3a:22:b6:77:6a:d4:f5:
af:f6:5e:c8:89:e8:22:be:8e:5b:72:c6:65:27:86:1a:28:a6:
10:a5:20:4e:57:96:a2:ac:b1:d1:85:06:9c:ba:43:a3:b3:a0:
45:e0:85:8a:b3:20:c0:fc:df:0c:85:1c:78:1f:08:1d:c1:e3:
a9:8d:b0:b7:0b:37:5d:6b:dd:e3:24:58:c5:03:f4:df:47:93:
72:5b:92:ee:80:1b:55:70:2f:b1:2b:d7:47:d5:21:4e:eb:8d:
5e:51:a1:53:cd:c4:fd:ba:16:14:ad:60:b7:3e:e3:d0:83:98:
1b:f2:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:35:43 2025 by rpki-client