Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa
File: 8174C3BEF16411E980D2F667C4F9AE02.roa (raw, json)
Hash identifier: VEw9MLhojPtBj7/yVbdylAjgIZeL4XHegjDH9vdhq/Y=
Subject key identifier: F2:44:B5:4D:B5:D2:83:AA:F0:E3:43:21:DF:40:6D:57:31:00:E3:B7
Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial: 0BDC
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa
Signing time: Wed 10 Apr 2024 19:28:12 +0000
ROA not before: Wed 10 Apr 2024 19:28:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38493
IP address blocks: 103.123.8.0/22 maxlen: 24
123.136.24.0/21 maxlen: 24
2404:7e00::/32 maxlen: 36
2404:7e00:500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916708F
Validity
Not Before: Apr 10 19:28:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6616e84c-6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:e4:92:df:eb:f6:0b:52:59:70:64:52:47:
e1:c6:99:4f:04:a4:df:bd:a8:cb:89:c9:05:3b:75:
fb:b8:e3:a9:59:91:5e:cb:95:04:58:be:d4:7e:59:
75:d1:eb:77:84:c2:32:e2:48:83:cc:55:a8:bc:32:
5b:be:cc:8e:ce:9d:5c:ee:38:05:3c:79:29:b8:46:
3d:8d:f8:2e:a6:f1:af:d3:78:31:0d:0b:14:9f:1c:
d2:7e:13:b4:a8:0c:ab:bd:46:70:87:6d:3d:81:4e:
be:00:69:1f:52:1c:68:6c:82:3e:55:60:88:14:69:
53:e0:d9:91:ec:2e:8f:98:f2:55:04:0b:90:24:f7:
19:8c:37:df:0a:13:44:01:11:3c:00:0c:50:28:59:
29:1e:85:96:b0:6e:84:42:7a:fc:39:08:49:68:b0:
bc:d5:f2:97:5f:a5:36:41:86:bd:09:53:0f:82:ed:
8c:b6:75:de:aa:fe:cc:b6:bf:10:46:97:1b:6e:50:
88:29:fd:e9:5e:76:8b:7d:fa:20:ce:cb:ab:83:30:
23:c9:59:67:64:c0:4e:60:cf:0d:a6:90:a7:f1:26:
32:47:40:08:f2:85:49:7f:bd:b2:c2:19:b9:af:3b:
4e:64:e0:f7:00:33:e0:4c:32:3e:87:49:52:b7:f6:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:B5:4D:B5:D2:83:AA:F0:E3:43:21:DF:40:6D:57:31:00:E3:B7
X509v3 Authority Key Identifier:
keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.8.0/22
123.136.24.0/21
IPv6:
2404:7e00::/32
Signature Algorithm: sha256WithRSAEncryption
52:b5:5a:34:84:db:c3:e2:35:ec:89:1a:75:f7:20:51:6a:6c:
66:31:08:2f:ff:23:2b:3c:11:49:a8:b2:21:2f:23:c2:24:b8:
78:c8:7c:33:83:a7:93:30:96:d5:f7:d8:38:f8:1a:18:e0:06:
ce:0a:bc:a8:42:99:56:49:8c:e0:e0:87:52:60:5c:53:a1:97:
37:99:96:b5:27:ca:a8:bd:be:6e:8f:b0:c2:f4:a9:f6:5d:ba:
6c:c3:fd:66:5f:94:87:b5:54:3a:7d:34:e7:ce:86:50:6d:7e:
3a:85:04:7d:cc:58:52:68:8a:87:02:3c:5f:d2:6c:dc:cb:3d:
87:4f:c7:0b:36:2b:03:75:9a:44:33:77:68:de:66:d2:50:cb:
48:1d:d3:2b:7e:0f:f5:4e:bb:ac:c2:2c:88:5d:e7:f4:82:62:
07:08:f1:d4:1e:11:a6:7b:a7:1e:95:9f:d3:ff:76:e4:02:01:
6e:10:40:62:11:1a:66:bc:9f:5c:13:48:aa:a7:44:46:a1:a0:
72:36:57:ec:59:bf:32:e6:48:27:bc:5e:d5:42:d0:e0:d4:1b:
a9:33:00:72:de:53:ae:cb:96:f2:9b:0f:15:52:17:90:19:6a:
52:71:0d:3c:89:ee:9f:36:8f:ef:c2:8b:c3:3a:b8:75:ca:94:
75:ab:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:27:50 2025 by rpki-client