Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/E5331958DB1611EBAAF26010C4F9AE02.roa
File: E5331958DB1611EBAAF26010C4F9AE02.roa (raw, json)
Hash identifier: 4S7Q4NTmgMyV3+cu2TKKY9EXoLnnOZvsXPPUox9aYp8=
Subject key identifier: C9:39:07:A3:42:24:0B:7F:5A:FE:6D:A2:26:C4:01:DB:9D:BB:75:1C
Certificate issuer: /CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
Certificate serial: 0493
Authority key identifier: 81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/E5331958DB1611EBAAF26010C4F9AE02.roa
Signing time: Fri 19 Jan 2024 01:22:39 +0000
ROA not before: Fri 19 Jan 2024 01:22:39 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 23858
IP address blocks: 103.125.218.0/24 maxlen: 24
2403:fa40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
Validity
Not Before: Jan 19 01:22:39 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65a9cede-5273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:fc:d2:71:ff:2c:a5:24:9b:8c:c3:7c:72:
61:a0:3d:39:0a:97:43:5b:82:d0:26:2b:ea:ad:89:
f4:97:1a:8e:e7:57:ae:00:51:a2:72:f6:73:ab:29:
59:86:3a:88:4f:8b:5d:f4:6c:95:39:df:4b:2a:5b:
c2:98:3b:fe:86:99:55:1d:61:b5:07:aa:f7:40:e6:
6b:ef:a1:82:fc:e6:3c:ee:36:3f:87:48:cd:9c:f5:
79:31:3a:ca:57:53:ee:c4:1e:0c:c5:23:ee:e2:74:
e4:d3:06:59:3e:75:e6:5d:39:e2:55:02:9e:67:a2:
06:7a:7b:a9:7c:bb:35:a1:a9:65:39:0f:60:10:74:
83:61:98:d8:dd:bb:db:6f:30:0f:75:70:66:f9:92:
51:cb:3d:8a:c6:c5:a1:f9:02:b5:fa:bd:a2:1f:a2:
31:13:d9:b9:07:78:6b:38:b1:e5:94:f4:c1:bd:6e:
ff:7a:75:8b:61:24:bf:8a:bd:6d:b2:63:8f:f8:d1:
ee:6f:dc:58:e5:11:2b:56:b4:3d:d8:90:e5:c9:a5:
aa:7c:8a:43:3d:37:c5:04:c2:67:3c:11:8c:cb:da:
82:32:c3:ce:95:71:b2:63:dc:0e:58:1a:94:2e:07:
5a:25:a8:ff:e3:50:e9:8a:e4:e8:50:2e:d2:31:60:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:07:A3:42:24:0B:7F:5A:FE:6D:A2:26:C4:01:DB:9D:BB:75:1C
X509v3 Authority Key Identifier:
keyid:81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/E5331958DB1611EBAAF26010C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.218.0/24
IPv6:
2403:fa40:2::/48
Signature Algorithm: sha256WithRSAEncryption
53:b5:4b:a6:7d:c9:57:92:d8:72:f8:c9:c0:ff:2d:33:a9:03:
87:8e:72:8d:dd:d8:c1:0d:dc:0a:b8:dd:24:65:ae:1e:08:d6:
bd:ad:79:a4:6b:97:1d:49:3d:e1:0e:1f:a6:0f:86:55:a9:42:
dc:6f:2b:24:0f:82:3a:a0:9f:67:91:81:6b:e1:06:8f:05:28:
5b:8f:c9:df:f9:7b:8c:3a:4c:33:34:c2:5b:6b:4e:9a:d0:40:
6b:6c:fb:e6:5f:71:0b:e0:ea:3a:8d:e5:bd:45:64:f1:e4:46:
56:76:56:21:15:ab:8b:67:59:18:ff:a2:43:bd:ac:52:ec:db:
a0:ed:3f:d2:60:87:86:98:d2:1b:37:56:94:6c:c8:06:4a:d5:
1d:cb:d3:b5:cb:61:ed:fc:ad:38:97:74:ea:2a:68:f6:ea:a3:
34:46:38:df:72:66:ad:64:2c:5b:3c:8e:3a:ef:23:c5:23:45:
7d:74:80:4d:df:e9:75:be:81:08:d1:1e:71:dd:7e:17:b8:9b:
c8:24:9e:4f:b7:ba:00:35:3e:33:d5:eb:fa:a5:a5:1a:90:15:
8c:57:4b:23:8e:dd:39:0e:90:c9:e2:e0:e6:16:fd:8e:6e:2e:
6e:63:89:10:20:14:c6:74:94:54:54:e8:16:ad:8b:b1:06:50:
93:c3:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org