Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa
File: 2F840DD2740911EDA7146F2DC4F9AE02.roa (raw, json)
Hash identifier: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=
Subject key identifier: 26:E1:93:71:DE:AD:FF:DB:AE:53:9E:E8:A5:6A:9B:E2:2B:1E:E1:59
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 170A
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa
Signing time: Sun 04 Aug 2024 16:54:12 +0000
ROA not before: Sun 04 Aug 2024 16:54:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132092
IP address blocks: 103.70.140.0/22 maxlen: 24
182.54.152.0/22 maxlen: 24
2406:c80::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5898 (0x170a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D
Validity
Not Before: Aug 4 16:54:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66afb233-05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:cd:fa:8b:0d:56:21:fa:89:ba:62:62:0e:
8d:6c:51:35:c6:fc:af:05:27:6a:e0:d1:38:d5:bd:
52:0b:57:5a:a3:49:54:9e:8c:7d:ed:c0:bd:21:91:
23:31:8a:33:af:a8:52:54:9f:10:8f:a6:7c:ec:fd:
fd:a5:6d:92:cb:52:50:64:9c:99:d9:b7:e8:74:8c:
e4:43:24:65:46:98:fa:82:16:cf:93:cb:f6:f0:72:
2f:5d:79:70:cf:38:8e:33:4f:56:ac:90:3b:8d:24:
43:3b:35:0a:76:6c:fb:8f:5a:29:b1:65:c6:d7:8e:
7d:91:e3:f2:d6:35:35:85:34:2a:22:3f:5e:9b:91:
0c:2d:8b:0d:d4:30:4b:58:e0:52:61:c4:b8:48:a5:
0e:c5:84:a7:a4:cf:54:cf:44:f6:f0:a8:45:0b:74:
22:bf:6e:76:6d:05:c6:cb:72:6e:c0:4b:9e:0c:d3:
39:9b:6c:0d:a1:0e:6d:4a:38:2a:9f:5a:11:75:67:
0b:9f:87:af:b8:e2:de:bd:33:94:0c:29:26:cd:e9:
3b:c1:4b:64:0c:3d:74:dd:86:ec:31:02:53:3e:42:
2d:b5:6c:05:90:b3:11:00:3c:97:d8:ca:e2:ef:9a:
63:25:e1:7d:36:35:0c:15:1d:d4:b3:33:b1:30:6d:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:93:71:DE:AD:FF:DB:AE:53:9E:E8:A5:6A:9B:E2:2B:1E:E1:59
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.140.0/22
182.54.152.0/22
IPv6:
2406:c80::/32
Signature Algorithm: sha256WithRSAEncryption
2a:59:f4:ae:a8:0b:8f:92:b4:0f:28:7b:2c:da:77:4c:2b:e8:
90:20:60:98:9b:84:a5:e3:be:e7:e3:9f:74:c3:6f:ef:5d:9e:
52:5c:e0:17:ca:53:95:38:97:3e:3b:9c:6d:3f:c6:b5:e7:2d:
df:fe:dd:d9:a8:4e:07:85:c2:70:75:07:38:f1:8b:18:b2:33:
72:28:7a:66:cf:8e:14:05:c6:4f:57:92:bb:50:bb:a3:35:7e:
35:a9:e5:f0:9c:d1:f2:36:b4:44:c6:66:cb:3b:a5:5f:5a:39:
ae:36:5c:1b:14:a6:d0:2d:5e:3f:79:0c:b2:7e:63:d1:41:16:
4f:60:0d:c7:c1:6b:8c:34:7c:d9:1f:ff:db:26:60:9a:4e:48:
32:35:74:3c:b6:c1:d9:64:ac:05:74:fd:77:33:3f:9c:48:1a:
28:b1:69:7f:41:82:cd:27:d8:99:0d:b9:4b:83:3e:4f:fc:75:
46:4c:27:ca:cf:1d:f8:11:94:e4:01:a9:5b:93:55:41:45:eb:
8a:c5:1c:1e:53:e6:3b:ab:57:31:b4:49:c0:9b:2a:d8:a8:6f:
79:92:e9:88:48:14:e8:98:0b:77:35:c9:dd:87:f2:1e:50:35:
8e:06:fa:77:6f:86:eb:c0:4a:9f:50:48:0b:00:84:3f:3f:31:
18:de:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:04 2025 by rpki-client