Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa
File: 43DF95FE252A11EDBD53BB3BC4F9AE02.roa (raw, json)
Hash identifier: 5d+Oj7mhSQNfpvwfwaFVexUFQaxeqTztkSCnyQGW01o=
Subject key identifier: A9:A3:7A:83:A0:40:22:8A:99:5E:31:EB:34:BB:66:F0:47:B0:F5:25
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A6F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:59 +0000
ROA not before: Thu 30 May 2024 16:02:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135745
IP address blocks: 103.138.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35439 (0x8a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a332-8edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:37:16:ec:eb:b1:82:b9:6f:86:d3:f8:39:
3d:68:fe:d7:88:4d:48:f2:76:cd:2d:c4:9e:83:cc:
53:37:f8:b4:27:1c:3c:ca:bd:ea:3f:60:17:4d:6e:
0a:00:7b:1a:36:e8:c2:63:bd:53:e6:5b:2a:95:ac:
df:42:72:83:ad:b7:61:15:80:09:05:6b:55:dc:49:
87:ea:d4:54:c0:f6:c3:14:5b:df:a5:5b:5b:05:ed:
9e:a0:86:9b:c6:eb:67:79:3c:fb:c4:b9:98:6e:ec:
ec:b2:63:83:7f:48:e0:3e:3b:a8:3b:24:d0:09:66:
32:aa:49:13:11:d2:16:4d:fb:17:fd:62:00:33:99:
05:d3:5d:16:8d:8e:fa:0e:d7:93:f0:04:a8:90:1b:
a7:a9:c4:9a:84:67:54:39:d7:7a:f6:9c:70:6d:c7:
9e:63:77:55:b2:fc:da:a8:c5:ae:de:fe:37:ae:47:
4c:ad:3d:af:e4:ba:f6:5e:66:9b:f1:b1:ed:7a:6b:
33:b4:e9:db:9d:6b:76:52:4b:f9:2f:48:5b:4d:2d:
08:46:c2:c6:b3:d4:5f:d8:96:0f:15:9c:5d:1f:29:
3e:a5:29:c8:d3:90:98:0b:74:23:d7:61:7e:b3:26:
32:f5:b7:aa:c3:7e:91:b8:9d:c2:66:dc:69:95:89:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:7A:83:A0:40:22:8A:99:5E:31:EB:34:BB:66:F0:47:B0:F5:25
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:98:26:5c:27:10:fb:84:2a:e3:14:67:57:57:84:33:11:8f:
30:71:0a:1d:c6:12:61:da:1e:c8:7e:ca:3c:62:38:b0:83:6f:
86:01:5e:a3:40:cb:fe:96:ab:3f:75:88:40:b1:a7:86:59:5a:
a7:13:b8:6e:03:af:b1:73:2b:25:00:28:bb:76:fb:a1:fb:7f:
b7:c2:8c:c2:24:cb:f0:a0:fe:4d:04:b5:e6:cc:d7:2e:c7:3c:
18:b4:68:3d:23:4d:25:08:e0:f4:2e:1b:1b:c5:15:91:6c:c8:
42:75:5b:df:c9:48:8d:85:a6:a7:b7:c0:16:0c:31:05:3b:38:
0e:a2:9e:c6:e9:9e:28:31:b8:f9:80:ff:a1:c3:7a:6d:cc:05:
6e:94:bf:80:8f:00:bb:df:bb:c2:a0:9d:09:58:2c:b6:31:70:
7d:78:91:8a:e7:53:70:96:65:d1:05:7b:6a:34:92:41:73:05:
30:2c:ad:ab:bc:fd:bf:46:92:b7:2a:8f:37:1f:d3:bd:61:b1:
a6:b5:f8:e6:5c:ba:6d:ef:56:f0:e5:35:82:43:5e:a2:bb:33:
f1:f6:3f:c2:37:be:4c:9b:c9:6b:d6:07:84:2c:29:37:b8:42:
5a:54:2b:f9:c3:6f:81:d5:3e:ea:54:14:37:a3:17:89:e4:a0:
83:7e:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:21 2025 by rpki-client