Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/7588488A3D9D11EEA098852CC4F9AE02.roa
File: 7588488A3D9D11EEA098852CC4F9AE02.roa (raw, json)
Hash identifier: jk+ToQo/0Fh8KxhQg2niItcOrmCzYlNm8sFm9KlWPZA=
Subject key identifier: 86:36:0D:B3:90:69:80:36:2F:F0:00:77:19:56:F0:BB:96:2D:99:96
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 08
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/7588488A3D9D11EEA098852CC4F9AE02.roa
Signing time: Fri 18 Aug 2023 08:01:39 +0000
ROA not before: Fri 18 Aug 2023 08:01:39 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 134475
IP address blocks: 103.237.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5
Validity
Not Before: Aug 18 08:01:39 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64df2562-0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:61:ec:eb:09:44:c5:7b:6d:15:05:fe:fd:
ee:41:de:2d:e1:d0:22:86:c6:e3:bf:b0:15:6b:e7:
3b:a1:79:42:8b:70:a9:b7:fa:90:70:62:04:77:56:
be:1b:a9:66:14:48:9c:10:45:77:2a:a0:c1:d1:ff:
7c:c1:30:b8:27:76:63:31:4c:2f:60:85:4a:42:93:
fa:82:f2:cc:d8:ad:83:0e:10:e9:7b:d4:d1:e7:16:
0f:0a:d0:8b:bb:d8:04:a7:7c:70:08:e7:d3:4a:ea:
28:26:03:74:4d:d1:f4:7d:a4:03:f9:48:5b:11:45:
f3:a0:d9:bb:67:36:aa:f6:dc:1e:ba:ad:7f:30:fe:
ba:28:b6:36:14:a0:a6:5d:33:a0:bd:25:3e:00:c4:
bd:54:ff:2d:dd:e5:03:be:0b:e6:0e:1c:39:8b:2a:
27:80:70:68:54:b9:78:2e:68:1e:90:96:13:d9:f2:
09:c3:3d:d9:2b:e0:45:a8:e9:87:dd:41:28:96:35:
fb:03:3f:c1:c8:82:0f:e9:04:70:2d:bf:8e:d3:14:
e6:e7:d6:aa:eb:a7:58:03:05:09:35:f9:ba:a7:94:
05:04:b1:11:e2:eb:be:30:88:1b:06:09:62:e3:0d:
94:4c:5e:81:d5:02:b8:40:d1:c3:dc:d0:1d:7c:bc:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:0D:B3:90:69:80:36:2F:F0:00:77:19:56:F0:BB:96:2D:99:96
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/7588488A3D9D11EEA098852CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.112.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:ff:2b:77:00:e6:a9:b5:27:61:c0:5e:8f:7a:7a:20:5a:
a4:c1:c4:8d:e5:ac:7f:b4:f5:55:aa:e5:7d:c7:b9:51:21:f8:
35:4d:50:ee:e7:37:a2:5f:23:7a:58:1e:57:4a:45:50:1c:c5:
be:d2:b2:84:98:52:49:53:dc:c3:66:53:36:48:22:85:50:35:
40:b8:ba:f8:cf:41:ff:e0:c9:70:41:8b:60:ac:39:7b:aa:ca:
c3:a8:f3:40:d5:93:05:45:49:d7:a5:b4:3f:79:8a:1b:c1:82:
78:8b:62:ea:f0:31:70:84:97:66:79:8d:0e:d9:c8:e0:dd:f3:
6b:12:b8:63:1b:d9:98:6b:8a:3b:a4:81:11:18:64:3a:8e:1c:
ad:55:09:8c:aa:96:0f:be:47:6d:fe:ae:28:f2:dd:80:1c:d0:
a6:d3:6a:c3:68:71:a6:ff:7c:05:6a:21:11:48:72:73:86:17:
d1:2c:05:fd:b0:dc:e1:9b:7a:a7:e2:d1:13:7d:4e:69:b3:a2:
eb:9a:28:f1:5f:52:32:05:55:1c:21:60:b0:ca:77:3b:bd:2e:
c7:ea:58:0d:f2:dd:b7:9b:b6:37:09:fb:5b:93:12:0e:4d:8b:
70:d7:c6:51:d1:bf:e3:1b:be:c8:61:02:5d:16:c3:d5:5d:80:
e2:a8:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:30 2025 by rpki-client