Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa
File: 89A93D5E971811E9AE51CA15C4F9AE02.roa (raw, json)
Hash identifier: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=
Subject key identifier: ED:68:EB:CE:74:DF:FC:20:78:27:74:24:F2:74:AE:D8:3C:29:FE:CD
Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial: 0E58
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa
Signing time: Wed 18 Dec 2024 18:16:11 +0000
ROA not before: Wed 18 Dec 2024 18:16:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 131447
IP address blocks: 103.253.134.0/23 maxlen: 23
103.253.134.0/24 maxlen: 24
103.253.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3672 (0xe58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EB4E
Validity
Not Before: Dec 18 18:16:11 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6763116b-8106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:30:35:5f:7a:f3:11:d9:c9:d6:8d:35:34:
0a:79:35:49:cd:5b:27:4b:8d:ce:f1:34:e5:e5:39:
b6:50:83:92:a4:73:24:4e:59:92:37:26:75:04:f3:
b9:0a:59:51:cb:65:85:91:23:a5:c4:c1:c3:53:e4:
ca:0d:98:b7:34:13:90:3f:c1:76:00:18:ce:2f:cc:
aa:30:50:2b:64:c7:02:9c:e5:f0:d8:0e:6a:95:c5:
b4:fc:31:2b:3e:1a:aa:e1:51:59:78:a0:17:43:91:
7e:f6:dc:a6:4b:f3:53:1d:a3:da:77:c4:d4:2d:fb:
78:95:9d:11:cc:df:5c:af:33:35:42:96:ea:79:64:
84:d4:60:04:38:83:01:6c:d4:a0:40:65:67:91:71:
c6:98:53:ba:f1:d6:d2:ef:2d:0c:36:e9:8f:fd:93:
c4:79:e1:b6:df:9a:95:5c:7d:54:2d:32:d7:dc:73:
ce:3f:18:9d:8a:20:6a:e7:d2:a9:0a:c6:73:cb:29:
37:0c:77:31:c3:ac:6e:65:52:69:82:41:3c:81:bd:
7c:2d:b1:8d:e8:39:df:a9:1e:93:6d:43:4f:81:74:
76:96:16:88:52:4b:62:df:38:f5:e0:77:64:21:a8:
20:2f:ae:bd:4a:87:2f:49:21:46:15:2c:59:b5:21:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:EB:CE:74:DF:FC:20:78:27:74:24:F2:74:AE:D8:3C:29:FE:CD
X509v3 Authority Key Identifier:
keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/89A93D5E971811E9AE51CA15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.134.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:80:04:55:88:0e:bd:19:c9:35:50:04:8c:76:6e:82:b3:83:
92:ca:dd:25:b9:18:9f:bd:de:8d:2e:a6:da:b5:34:4e:71:d0:
27:37:d1:72:53:83:5b:85:a2:cc:ae:cd:7b:c7:47:d9:a8:4e:
83:a6:e7:7e:0a:e5:a6:e8:a8:65:40:e6:2b:32:78:f8:77:93:
e3:ef:2f:6e:bb:db:de:cf:5c:ca:7e:5d:6e:06:27:0e:8d:ec:
a5:52:bd:44:66:d5:92:94:16:d6:55:9b:19:cd:6f:55:3a:26:
e3:dd:64:d7:4d:f5:23:88:00:bc:fa:2a:48:ab:ef:03:5a:92:
b7:fc:55:ac:cc:1b:96:ab:a1:25:f6:63:19:ca:fb:1e:78:15:
dd:50:07:07:81:a5:41:5b:ef:ba:92:0e:4a:8a:89:6a:79:37:
15:f8:83:96:11:87:6e:2e:ff:8a:ae:24:02:f5:4e:39:f8:1a:
81:75:1b:49:a1:6f:7b:3f:1c:db:f7:e4:37:3b:a4:91:34:66:
06:83:48:c9:f7:30:1d:7e:68:f4:6c:2c:50:ce:78:49:c0:aa:
be:76:64:4c:72:d8:b6:06:fb:1d:27:19:85:53:07:25:7b:b3:
d7:29:b9:b6:df:d6:f1:4e:7c:38:70:31:d0:18:ac:36:26:ad:
8c:f0:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:02:45 2025 by rpki-client