Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/29779172DD2311EF87F5EC47C4F9AE02.roa
File: 29779172DD2311EF87F5EC47C4F9AE02.roa (raw, json)
Hash identifier: zO5pfufkvbKtzs3Is2jhE8FRoNAl15kjJ/LEGBkA2JA=
Subject key identifier: F1:59:AA:55:D1:96:E9:6E:D3:83:F3:9C:56:2F:2D:BE:0B:E6:91:20
Certificate issuer: /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial: B2
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/29779172DD2311EF87F5EC47C4F9AE02.roa
Signing time: Thu 13 Feb 2025 07:37:35 +0000
ROA not before: Thu 13 Feb 2025 07:37:35 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140057
IP address blocks: 103.163.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A132
Validity
Not Before: Feb 13 07:37:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ada13e-4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:12:2e:d3:fc:0f:99:ed:49:14:67:72:6a:
84:f9:90:06:5f:7f:83:5f:4c:90:b4:a4:11:ee:73:
d8:c7:2a:85:4d:3c:b3:f9:81:8f:4d:a3:05:91:bb:
59:3e:48:22:16:e1:61:5d:1e:68:ed:bc:5e:21:da:
18:48:a8:e5:33:2a:ba:3f:21:48:60:0e:39:3a:0c:
d7:61:81:ab:39:23:6e:51:0f:5e:74:a0:4c:36:45:
b2:2e:b9:75:d6:28:d3:79:d0:d7:6c:f0:df:aa:12:
27:ac:b0:03:07:ff:ac:ff:60:96:59:7f:fd:c0:d2:
f5:5b:1c:49:19:c4:de:75:3a:aa:24:c4:7f:c0:2a:
07:c0:fe:e3:1b:b0:d4:48:5e:42:b5:13:f2:93:c0:
58:63:48:d1:67:0a:ba:aa:38:e4:26:63:07:e8:c8:
8c:53:a5:48:bf:63:3a:fa:44:51:f3:80:ab:e9:7f:
51:86:c6:c4:02:e5:1e:52:d0:33:bf:25:df:7b:6e:
c6:67:51:a9:64:d5:a5:23:e0:04:29:a5:c1:14:ec:
32:d9:3c:52:41:48:fa:64:60:bb:ff:53:72:c8:46:
80:ac:c8:9a:be:d2:82:ee:80:d5:b5:b0:8d:0a:c1:
1e:68:14:99:ee:cb:07:b5:83:2e:30:9b:04:29:b6:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:59:AA:55:D1:96:E9:6E:D3:83:F3:9C:56:2F:2D:BE:0B:E6:91:20
X509v3 Authority Key Identifier:
keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/29779172DD2311EF87F5EC47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.133.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f6:1a:7e:07:4a:ae:f6:7d:3a:1d:38:11:f7:38:e3:82:25:
98:07:37:02:86:30:ee:6f:13:fa:0f:ec:e4:ea:6b:d2:6a:e9:
60:66:98:a1:19:63:bc:1d:a3:44:36:66:de:22:a3:3a:33:24:
09:ce:49:5a:f7:ec:10:c4:53:fe:9f:78:b4:05:9c:ec:00:32:
51:6e:c2:d3:c4:86:b6:96:da:ea:a0:7f:f8:07:a4:2d:3a:c6:
15:99:0b:b6:c5:48:3f:af:5a:36:f7:d0:a5:b7:31:c1:11:26:
5c:18:03:6d:d2:e2:6b:4c:ef:a4:d7:d6:36:37:6b:0a:eb:b0:
8d:51:c0:4b:bf:bd:95:96:55:ef:d0:4c:0a:5b:af:79:84:74:
c0:f9:57:44:19:8c:88:0c:e2:07:44:74:2c:b6:26:74:bb:fe:
e1:03:e4:88:ce:f4:99:61:3e:b1:e3:d8:4e:15:5c:0b:14:76:
0f:05:69:93:79:d8:b2:3d:c5:a0:2d:f3:98:f9:55:22:11:ac:
22:7c:d4:62:a4:cc:c2:02:da:e3:d1:da:5f:e2:69:18:40:30:
fa:74:ee:06:f3:f4:6d:6f:cb:df:93:bd:b6:8c:bb:1d:b8:e9:
f6:17:e0:a5:96:12:d7:ef:58:d1:c7:8d:55:07:b6:d2:46:03:
95:d9:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:02 2025 by rpki-client