Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa
File: 0C98BB26325411ECB11CE73EC4F9AE02.roa (raw, json)
Hash identifier: 5K39QtI6zVT3fqpN6dKajJUlFJSUMTHVz9h+FsAwDOs=
Subject key identifier: E1:D9:CD:43:18:8C:59:D7:62:12:68:D5:B6:0B:C8:7C:0F:F9:92:F3
Certificate issuer: /CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC
Certificate serial: 062B
Authority key identifier: 75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa
Signing time: Thu 22 Jun 2023 23:24:49 +0000
ROA not before: Thu 22 Jun 2023 23:24:49 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 399546
IP address blocks: 103.138.188.0/24 maxlen: 24
103.138.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA59D, serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC
Validity
Not Before: Jun 22 23:24:49 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6494d841-1aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:63:6e:c0:21:97:9d:3d:a6:03:66:6d:ee:
e0:ac:e7:4e:96:72:13:29:7d:56:0b:ff:e2:68:18:
79:4d:6d:7a:2c:01:e2:20:26:04:09:77:14:b6:8e:
cc:52:00:f2:77:30:91:de:c2:84:fa:08:e2:11:6a:
e4:24:dd:d1:ad:2d:18:02:c6:cd:78:e6:87:28:b3:
59:3e:6f:a4:e1:a3:c8:26:67:9b:eb:08:7e:a4:97:
6b:bb:ae:24:54:10:c5:69:29:5f:25:1f:4a:c0:fd:
1f:c4:05:53:0b:e2:af:1f:97:99:0a:f0:da:fc:48:
b1:e8:5d:ed:4e:c9:1c:ce:4b:32:4d:f7:b1:38:1b:
b5:a5:ba:48:40:71:52:7b:c7:92:91:4a:56:3e:2e:
94:b7:03:0b:b7:c8:66:14:40:71:ff:41:f2:0e:b5:
6b:44:ea:78:fd:e3:db:6d:85:5b:81:29:0e:73:1b:
a7:a4:b9:27:a1:9e:51:98:30:96:c0:1a:3f:05:e3:
2d:98:b6:df:37:7c:b4:f2:7e:0e:a8:47:69:9a:2a:
29:18:bd:98:ee:db:95:90:c8:40:8e:6e:85:e6:40:
73:a1:b7:f3:2c:ee:69:0b:2f:ae:23:a0:0d:44:53:
73:3e:81:f0:81:13:6d:6a:62:c2:0e:b5:4d:16:5c:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:CD:43:18:8C:59:D7:62:12:68:D5:B6:0B:C8:7C:0F:F9:92:F3
X509v3 Authority Key Identifier:
keyid:75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/0C98BB26325411ECB11CE73EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.188.0/23
Signature Algorithm: sha256WithRSAEncryption
09:68:fb:30:e7:61:2d:29:42:2d:48:fe:4c:91:3c:59:34:9e:
fc:03:dc:f8:70:2e:90:7a:3e:d0:2c:32:c6:4c:71:b6:af:2e:
3a:1f:31:89:cc:da:15:f4:81:7b:2a:19:6f:e6:09:36:ff:93:
02:d3:56:52:3b:37:ce:fb:55:89:f0:b3:56:f7:92:48:c3:dc:
70:d9:ce:e0:6f:fd:51:18:80:c6:41:e4:ed:52:41:e2:f3:ec:
2e:b3:74:ed:b5:64:b2:61:52:1c:11:1d:49:34:d9:33:e2:8e:
a5:e3:52:9a:47:cf:c0:f8:84:45:b6:61:dd:c0:ca:c3:44:1d:
18:15:f3:0b:1f:7a:a6:93:f9:f0:fe:24:73:12:bb:bc:a2:c0:
4b:de:0a:5d:39:60:ab:a3:91:d6:9d:7c:ec:6c:92:90:3a:51:
05:b3:58:b3:25:bf:99:e6:b2:76:bd:45:99:3a:eb:50:d5:49:
c3:ef:c6:bf:32:66:93:ad:23:5e:ad:61:c2:6c:81:25:f1:10:
e0:71:8b:15:2c:db:af:76:c1:c0:96:73:72:b8:35:78:5d:e9:
e1:af:a7:1a:62:d2:48:9b:be:10:28:ba:46:75:be:ad:f3:c3:
7a:28:f9:d6:d9:f4:71:18:24:97:38:1d:d3:77:2b:17:4e:b6:
a0:a8:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:19:11 2025 by rpki-client