Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
File: C98E616802E511EF8ED1355CC4F9AE02.roa (raw, json)
Hash identifier: g/vYt2sJquMykKKd8bZeSSOgmSqzVFIJK4b4vgQp8Zs=
Subject key identifier: A0:2D:28:40:E0:51:D0:D0:A4:80:34:DF:2E:63:22:BB:41:7A:26:E7
Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial: 0940
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
Signing time: Thu 02 May 2024 21:39:55 +0000
ROA not before: Thu 02 May 2024 21:39:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152479
IP address blocks: 103.150.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDEB
Validity
Not Before: May 2 21:39:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6634082a-048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2a:af:b5:b8:35:13:96:f0:d2:37:df:a9:3c:
25:b3:f1:52:e4:43:fb:f8:86:5b:63:ac:ba:b6:0a:
74:5d:0a:71:e4:be:8c:4f:3a:3a:e8:9d:62:32:88:
d5:a9:51:68:83:43:c2:2f:fe:73:22:e6:32:c9:2c:
8a:3b:fa:93:b7:97:5a:b7:62:c2:09:57:65:54:59:
89:78:7a:57:dd:0e:39:3c:f4:eb:d3:58:aa:c9:13:
f3:f7:47:d2:ad:01:0a:a6:dd:f6:45:f4:37:e3:50:
77:ab:51:14:48:6d:27:c8:a2:48:74:f7:d2:3f:1d:
30:2b:c3:a9:26:80:94:21:f7:00:f8:67:b4:d4:8d:
c4:af:52:7f:fb:20:0f:4e:72:b7:75:12:fe:91:7b:
a2:52:ae:b2:da:45:94:39:65:b8:3d:d3:c2:cb:84:
89:6f:4e:ac:c2:a8:e4:0a:72:1c:a9:c6:5c:a7:e5:
b0:56:7e:38:2c:17:d6:08:24:98:d9:19:22:11:a3:
a1:82:55:1d:40:77:f3:40:9a:49:7e:4c:23:cf:12:
30:7b:e3:41:9f:6e:71:2e:c5:11:b7:ad:9c:47:d9:
d0:bc:74:5c:fa:8c:35:4d:1d:2a:ec:07:34:f2:7a:
a0:15:86:6c:ed:85:88:d1:87:8a:7c:52:10:35:49:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:28:40:E0:51:D0:D0:A4:80:34:DF:2E:63:22:BB:41:7A:26:E7
X509v3 Authority Key Identifier:
keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:dc:78:50:74:26:ef:5a:89:cb:b9:7d:7b:a0:b1:e7:d8:ce:
71:69:ad:05:99:4e:69:12:b6:de:a8:7c:63:7e:70:d7:c9:06:
22:6e:66:0a:49:3e:1e:4e:45:8f:dc:df:b0:ae:c2:a0:94:4c:
03:96:7a:c6:a4:81:6b:66:24:58:83:b2:d2:14:3c:6b:dc:44:
cb:98:05:9e:e1:ca:88:b1:a2:9f:d2:75:74:2d:e0:3a:16:12:
35:63:b9:c0:41:c6:45:d5:7e:98:54:30:93:10:f1:36:fb:cd:
fe:be:e7:0b:4d:49:31:c6:b0:f1:6e:12:c7:e1:72:16:0c:f2:
8d:c7:75:4e:09:50:ca:69:04:18:d7:f9:f8:5f:a8:b3:bf:c2:
36:bb:f6:8a:6d:e5:77:b2:75:47:4b:d0:a5:e2:f6:12:51:84:
6e:9f:f8:62:b4:f8:95:27:38:fa:d3:ac:91:b6:87:57:11:a8:
a4:15:f9:29:79:08:85:26:18:ab:fe:7e:ed:00:7d:18:4e:47:
ac:cc:79:44:78:c5:dd:95:17:db:0f:c9:d1:1f:aa:58:76:6b:
c2:c9:be:1c:d1:ab:83:e5:0b:b4:ae:e1:bf:59:bc:7a:ea:a7:
5f:07:11:e6:a4:84:12:d2:8f:e0:d0:da:18:ad:b3:e2:d5:2b:
f8:84:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:42 2025 by rpki-client