Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16187A3AC1DD11EFB25CEF58C4F9AE02.roa
File: 16187A3AC1DD11EFB25CEF58C4F9AE02.roa (raw, json)
Hash identifier: l2XrDODgqWGeTm2ONew2x+aY84BFmuac68hflXx4Frg=
Subject key identifier: B9:C0:DF:3D:7C:76:E1:9C:6C:82:D1:DD:71:61:0A:45:EA:84:8D:53
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9FDE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16187A3AC1DD11EFB25CEF58C4F9AE02.roa
Signing time: Tue 24 Dec 2024 09:54:37 +0000
ROA not before: Tue 24 Dec 2024 09:54:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18196
IP address blocks: 103.171.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40926 (0x9fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 24 09:54:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676a84dd-0bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:b2:d3:08:bc:f0:4d:f3:a2:05:12:9a:72:
4f:59:56:e8:cb:51:48:31:2d:80:03:f6:e9:dd:d5:
c8:76:7b:e5:19:ca:13:87:0e:f0:cd:45:7b:97:bc:
31:4c:89:f8:95:9b:20:31:d1:8e:e9:4c:2a:67:92:
9d:db:a2:61:7f:72:29:d6:45:e7:b8:40:9a:60:c4:
02:ee:10:57:97:43:19:0f:1c:5e:a2:78:0e:9c:b0:
f6:c6:cd:b5:a1:25:b5:df:2f:ec:90:b6:f0:b9:b7:
e0:c7:5e:db:14:b4:9d:49:48:67:82:ef:6a:b5:58:
fc:fd:ca:4c:77:a1:cc:7b:03:b7:b5:f8:c7:0d:bc:
91:24:54:ea:c0:bd:50:60:0b:25:5c:e0:b0:f0:c1:
fb:75:f7:b8:39:12:95:cd:59:20:7a:30:e8:90:c8:
14:ec:b7:ba:06:9e:32:37:5c:b9:13:76:af:c3:48:
79:70:84:d1:e2:fb:a3:53:db:e6:18:3e:e1:66:58:
10:91:bd:1a:4d:37:21:da:38:55:03:e5:8c:c3:3b:
f1:86:a4:8b:c8:74:60:12:15:9e:8e:c4:74:40:46:
6e:bf:e6:f7:a3:0b:3a:5b:5c:ec:d3:7e:e6:91:5c:
db:2c:75:da:83:08:ff:9f:13:2f:c8:52:e5:d8:5d:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:DF:3D:7C:76:E1:9C:6C:82:D1:DD:71:61:0A:45:EA:84:8D:53
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16187A3AC1DD11EFB25CEF58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.118.0/23
Signature Algorithm: sha256WithRSAEncryption
91:bc:0b:d7:3e:86:50:d9:33:6e:a1:a7:5c:fb:60:64:65:31:
50:69:69:52:fc:80:78:b8:b4:c5:39:6c:a6:0e:53:1b:b2:9c:
01:d7:65:e1:b2:5b:d6:13:61:69:ac:bb:df:51:14:a5:37:1e:
0c:08:e4:f2:e2:ac:08:ca:33:f8:af:cb:2a:7b:f5:a4:e6:91:
9d:01:e8:fa:2a:27:2f:2a:eb:93:6d:ba:03:50:2c:09:2a:99:
63:5e:5d:f4:12:99:fc:02:c2:55:45:00:95:06:4f:8b:bb:47:
8a:67:ae:3c:fa:5a:89:84:34:f5:77:98:73:2b:15:32:4d:21:
f2:53:75:84:b6:2e:3c:fb:72:8b:19:13:a9:6a:ba:cd:d9:41:
8e:19:ae:ea:aa:1f:50:09:53:3d:90:f5:f4:2d:de:86:78:cc:
bd:eb:c8:01:3d:31:c9:c8:17:6e:d2:8c:2d:32:8b:77:bd:c1:
38:f5:91:e2:1e:e9:be:2d:cf:c0:e3:c4:d0:61:8b:dc:ff:42:
0e:fc:f1:16:81:fd:ca:91:4b:b7:6a:ac:c3:2c:43:44:21:66:
5e:8d:71:27:47:84:1c:9b:0a:b2:5d:51:c6:d4:c0:13:49:db:
6b:d2:5e:c0:b4:dc:d9:9e:e8:f3:07:12:6f:d3:34:84:3c:df:
09:65:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:58:00 2025 by rpki-client