Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa
File: 299F07F2E15611EFA15DF23DC4F9AE02.roa (raw, json)
Hash identifier: O262vPh6C595221Ul2fxoxkRafJ7hKmHlVla4WIBVtg=
Subject key identifier: 73:B5:5D:7B:06:00:36:85:10:64:16:6C:D0:86:30:0C:2B:24:C0:CC
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 02EE
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa
Signing time: Sun 02 Feb 2025 11:09:25 +0000
ROA not before: Sun 02 Feb 2025 11:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138640
IP address blocks: 103.185.226.0/24 maxlen: 24
103.185.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B
Validity
Not Before: Feb 2 11:09:25 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679f5265-73fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:16:79:f9:4f:22:49:26:ff:de:02:e8:f2:
b8:4c:6c:28:36:27:d9:9a:84:87:bf:98:09:37:3b:
f0:69:33:f3:36:ff:2c:6d:2d:f6:01:9b:bf:6d:f4:
44:34:02:8c:96:78:98:21:94:46:86:31:fd:e7:d6:
6d:87:fa:d6:67:1e:8f:af:2a:30:1e:6f:dd:42:74:
93:0a:ca:c1:fd:97:8f:c0:5d:6d:22:7f:e3:c4:49:
23:58:bc:34:a4:c2:76:0c:33:0d:3c:6b:47:f6:48:
03:18:42:33:7b:ec:d1:82:fd:75:21:dd:99:6c:9e:
a9:36:c4:96:ba:14:23:3b:f5:1d:53:1f:de:66:56:
f8:df:2c:ab:5c:38:f7:b5:4c:73:fc:de:cc:0e:8f:
dd:8a:9b:ac:75:5e:23:5f:03:b4:c3:5b:2e:a4:70:
fc:23:b8:aa:02:e6:b0:c2:83:e0:0d:43:e9:51:ef:
d9:65:05:4c:2c:75:8b:1c:c0:4a:b2:9d:21:4a:87:
c9:f2:e9:a8:40:2d:ee:c8:39:f0:bb:d1:27:b1:23:
b0:58:70:02:d9:22:17:66:cc:09:3d:27:11:15:5b:
52:51:6e:71:95:12:35:50:60:70:05:bb:0c:18:30:
ae:a7:99:8c:65:09:f1:a8:a1:72:36:67:e3:08:64:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:5D:7B:06:00:36:85:10:64:16:6C:D0:86:30:0C:2B:24:C0:CC
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:e4:e0:8d:6c:68:31:da:ad:39:ab:55:f8:1d:d6:e2:7d:6c:
65:d9:ad:52:75:fa:1c:90:90:aa:65:c4:aa:91:ee:2a:e1:64:
78:85:e7:97:1a:22:6f:fd:26:ae:2e:37:12:e0:47:d6:9e:bc:
79:25:5a:80:99:29:e9:c9:77:b9:f2:8a:34:a0:aa:19:04:a1:
2a:0e:57:87:c5:49:d5:17:5b:bd:fc:3e:79:f1:93:5c:ff:63:
4b:7f:9e:42:ba:02:31:ad:24:d2:19:54:f6:68:93:28:19:00:
76:bc:77:0b:e4:a6:bc:72:23:2b:f9:ab:10:64:70:c9:d4:84:
5c:46:98:1d:3b:88:b6:09:30:0b:c0:45:18:dc:ae:ea:9a:df:
c6:d8:5b:a7:2c:b4:3f:99:74:40:80:e1:40:b6:19:99:f2:43:
60:7b:3c:d9:b7:f1:b2:3c:e6:e5:79:2b:53:8c:c5:d3:49:c5:
08:3c:a2:8c:ce:99:29:99:90:b9:e7:f3:25:72:ff:30:e2:6d:
25:2c:06:0e:28:0c:4e:5e:0f:a2:e2:c3:00:08:81:a4:ff:6d:
63:a1:80:a4:7c:d3:74:5f:e3:36:80:58:80:1d:44:9e:4f:68:
c2:f9:57:52:73:26:c7:3a:27:c0:6b:9a:c1:f0:fb:9a:9d:9a:
9c:f3:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:35:02 2025 by rpki-client