Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/121B45D4EAD211EF86BE5F6CC4F9AE02.roa
File: 121B45D4EAD211EF86BE5F6CC4F9AE02.roa (raw, json)
Hash identifier: 4XhMeulbjCbDrrXceK5ENEFOOXi4CyB3ZynrVLNH4z8=
Subject key identifier: E7:78:78:2A:2F:92:AC:F9:CA:1D:D0:9D:DC:1C:07:44:D6:4A:93:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A620
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/121B45D4EAD211EF86BE5F6CC4F9AE02.roa
Signing time: Fri 14 Feb 2025 12:49:04 +0000
ROA not before: Fri 14 Feb 2025 12:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153581
IP address blocks: 103.173.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42528 (0xa620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 14 12:49:04 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67af3bc0-e0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:ad:c5:a2:cd:9c:d2:d8:0b:c2:97:ed:fe:
33:d4:e2:0d:20:ef:7a:1e:d3:d6:b5:5d:d5:84:9f:
96:ec:61:04:54:0c:45:73:48:ca:25:4a:4b:ca:6a:
63:90:fc:81:fa:c0:a3:d7:19:32:69:cf:41:52:01:
7e:d9:2a:cf:5e:1c:0f:e3:f4:1c:d1:64:26:5c:7a:
e6:2c:bf:11:4c:1c:c9:18:0d:dc:b8:fd:27:ee:de:
b0:a1:fd:f8:bf:42:53:82:12:7b:0f:f2:11:01:f7:
1a:6f:e3:40:26:6b:29:da:b0:25:9e:43:00:6b:da:
32:0f:a1:32:de:62:83:22:b0:e0:31:b8:bd:ab:ca:
be:ea:4f:b8:37:75:e0:1a:18:49:db:ee:9d:c7:60:
58:2d:44:79:43:29:4a:3c:56:99:b3:2a:89:37:42:
38:b3:73:32:3f:33:eb:fd:8b:30:5d:8b:6f:03:8b:
75:97:aa:d6:8a:03:46:cc:4c:76:a2:29:c1:9b:2b:
ae:c6:0b:fe:56:72:8f:45:c8:e0:b8:b1:9c:d3:c7:
a0:66:a1:76:51:e1:8f:f5:1b:59:a7:60:56:64:42:
33:a1:d3:43:42:f4:e7:ba:b7:9c:72:7a:57:bf:bf:
86:6e:ff:76:18:22:cf:39:30:b5:1e:4a:34:ba:9b:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:78:2A:2F:92:AC:F9:CA:1D:D0:9D:DC:1C:07:44:D6:4A:93:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/121B45D4EAD211EF86BE5F6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.14.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e5:b6:38:89:2d:4b:7e:b5:50:79:88:a4:db:ce:96:fa:4d:
54:84:69:b9:e1:a9:82:24:88:ff:5c:4e:32:ee:b1:ae:f8:90:
ca:70:0f:8c:0d:d8:68:2c:19:d2:c1:61:93:52:2f:98:6c:88:
3e:ce:a1:3b:de:af:e9:de:9a:9e:31:bb:9b:6d:20:9c:eb:e7:
60:fc:c7:ea:5f:cb:40:39:cd:d2:07:f8:54:68:d8:03:23:3e:
81:c0:17:fe:de:88:ad:8d:35:69:77:63:d1:8b:38:2d:ba:d8:
42:30:ea:0e:ae:c3:3d:9c:35:e6:a9:e5:f9:67:48:2d:4c:0d:
4e:79:61:31:20:1d:df:24:af:91:49:a8:cb:e9:3f:8f:51:25:
40:8c:5d:2b:1a:ff:75:f5:18:c2:08:79:19:d8:12:15:19:0c:
e9:df:8e:cf:fc:76:05:7d:fd:5f:75:1e:6e:a5:e7:e1:42:7a:
14:40:ab:c8:98:fc:6d:d4:a4:82:be:0b:dd:d7:80:91:17:9f:
9d:95:69:3a:55:1a:15:28:f1:b1:ec:39:27:23:a7:81:3c:e1:
c2:72:9c:44:3c:37:6c:d2:13:e4:9b:49:e1:7d:62:b9:e0:ef:
a5:30:85:8c:21:b4:ba:e2:c4:99:37:30:04:a1:41:c6:79:1f:
bb:ca:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:26 2025 by rpki-client