Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/0629ED5899E611EAB3C00943C4F9AE02.roa
File: 0629ED5899E611EAB3C00943C4F9AE02.roa (raw, json)
Hash identifier: ntZY8DnZZ35XKhxhSjiaOCQ6r50EMqOwRe4nGIBaLbU=
Subject key identifier: BA:D1:52:95:3F:22:F8:C6:BE:B0:87:22:26:6A:1A:E8:46:44:62:27
Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial: 0C76
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/0629ED5899E611EAB3C00943C4F9AE02.roa
Signing time: Tue 26 Dec 2023 18:46:18 +0000
ROA not before: Tue 26 Dec 2023 18:46:18 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138581
IP address blocks: 103.133.204.0/22 maxlen: 23
103.133.204.0/23 maxlen: 24
103.133.207.0/24 maxlen: 24
2404:5340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E2AC
Validity
Not Before: Dec 26 18:46:18 2023 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=658b1f79-22c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:57:b0:f5:17:22:2b:78:36:8e:8e:f9:a9:
a1:30:1e:2d:a4:53:33:2f:5a:78:74:47:fc:4f:05:
73:74:4e:08:62:5a:6a:04:da:48:d8:77:7d:ef:6f:
9c:5e:c2:be:1d:12:32:48:de:16:35:40:c9:be:ac:
fe:cc:98:dd:a6:f4:52:07:c2:75:f7:ad:d9:f6:ba:
96:28:c8:bb:71:6c:f9:4e:61:35:84:2e:2d:6e:a1:
b5:55:e9:29:8c:4e:b2:3c:7e:1b:94:0d:7a:b4:a2:
aa:a6:81:ae:03:4e:56:03:30:71:13:89:c4:49:b7:
6a:ff:66:28:44:ee:cb:d7:56:0c:2b:50:5e:f1:ef:
fa:a3:a2:2d:fe:ae:37:cd:4b:ee:44:69:4b:2b:5e:
aa:13:b6:85:b4:40:94:19:8b:d9:67:44:9e:35:f2:
8e:db:14:4d:fa:17:1f:97:d8:b1:cc:8b:60:4b:c2:
75:cf:dd:9c:fc:9d:6b:4e:36:92:18:6c:6b:45:fb:
e6:98:be:fd:ac:13:ec:0a:07:7c:4e:d4:2e:40:77:
52:93:33:d7:c2:e7:3d:1c:c3:fa:96:0d:7c:e1:4f:
65:19:b3:ae:dd:10:95:fb:77:9d:6d:6a:b4:76:c7:
d0:be:ec:34:e2:2d:8c:63:6d:61:fb:98:1e:be:96:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:52:95:3F:22:F8:C6:BE:B0:87:22:26:6A:1A:E8:46:44:62:27
X509v3 Authority Key Identifier:
keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/0629ED5899E611EAB3C00943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.204.0/22
IPv6:
2404:5340::/32
Signature Algorithm: sha256WithRSAEncryption
46:bd:56:1e:f0:25:dc:f0:85:25:94:5e:42:d1:c3:dc:ac:30:
60:1c:2b:13:c3:20:e3:35:46:f4:2e:d4:3f:23:53:07:99:62:
c3:21:c1:80:2e:ed:dd:b9:94:40:dc:6e:b0:c4:bd:ec:44:59:
10:ac:04:b7:56:0b:45:5f:ab:95:f0:a2:8c:89:7f:85:fc:ba:
a0:a1:a7:86:f8:79:dc:1e:99:73:33:f0:42:89:2d:72:fe:e4:
e9:13:1d:57:52:27:2a:84:3f:7f:c6:7f:51:6c:5f:75:f9:b6:
9a:ba:1a:83:d3:7e:b8:6f:66:61:15:af:0a:30:2d:6e:b1:69:
01:fd:12:53:02:73:68:15:1e:7f:4e:2a:9b:01:34:0c:34:46:
bb:d1:07:d6:a1:0b:3b:9b:b6:8b:8e:a6:e0:f6:8d:a6:40:c7:
d9:2f:0e:4c:6c:80:63:95:2e:ec:69:c5:f4:ec:00:8c:fb:e0:
da:f9:33:7b:13:f1:eb:4d:fd:b0:a3:22:75:ca:a9:14:8d:33:
fd:db:34:a3:6e:c6:0e:83:37:90:be:64:ac:32:28:02:b9:e1:
f1:ab:df:9e:f2:41:13:d5:47:b5:9d:3a:ad:fd:e1:2c:cd:d5:
bd:85:7a:dd:4e:3d:e8:1b:7f:9c:39:4a:36:c8:e3:a3:31:88:
9d:39:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:13:55 2025 by rpki-client