Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
File: 5E5C351ECC5A11EC8162C282C4F9AE02.roa (raw, json)
Hash identifier: HakXgNsB3QGJniAu+MG4FMIqobJ6YvPCARclK/8ZBEI=
Subject key identifier: 8F:F5:C6:54:7E:28:CC:4D:12:99:84:F3:1E:2D:09:DA:03:2C:E1:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:17 +0000
ROA not before: Thu 30 May 2024 16:00:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134867
IP address blocks: 103.183.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35272 (0x89c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:00:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a291-056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:3e:0d:4d:da:e7:a9:84:bd:d3:b3:a0:d2:
a0:7c:b0:a0:8f:a9:c8:d8:9d:df:2d:14:36:44:18:
87:53:8d:40:b9:06:f5:ac:98:0d:b6:b1:39:e8:b6:
66:ed:85:9a:0b:2e:c5:c7:6e:2a:ac:17:1f:f2:98:
9e:c0:8a:57:92:ad:92:45:b8:5b:a7:99:ff:c3:70:
cf:40:fa:a0:c1:5a:8f:65:36:36:47:bf:09:80:53:
9e:74:6b:c3:b6:14:5b:5c:9c:80:e3:de:60:9c:4d:
47:6c:75:ee:cc:96:6c:02:bd:0c:83:34:b5:50:f1:
64:1d:8f:0c:10:7e:3a:09:80:1f:d8:78:f8:26:da:
ae:47:21:f4:ca:5c:62:fb:65:39:01:70:ca:bf:8b:
ec:2f:48:01:1d:59:7c:b9:e6:be:03:24:0d:78:01:
e7:8c:b9:24:2f:de:c6:bf:b4:47:a4:f8:e1:a3:44:
9e:b1:28:4b:28:1f:4c:2c:4b:b8:bf:a7:82:5b:20:
4a:5d:75:56:83:20:5e:c5:19:4f:f3:88:98:49:a7:
92:3e:78:b3:74:3d:fc:7e:4c:9a:2b:3a:82:2d:5b:
f6:d9:56:ea:e1:f8:44:77:03:d2:6f:64:c7:eb:37:
c6:58:97:ac:78:d6:09:bd:31:ad:11:a3:97:7e:9a:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:C6:54:7E:28:CC:4D:12:99:84:F3:1E:2D:09:DA:03:2C:E1:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.233.0/24
Signature Algorithm: sha256WithRSAEncryption
09:94:77:96:fe:78:5e:cb:32:ba:f4:fa:8d:58:95:c2:93:93:
09:fa:ef:35:a4:94:2a:94:91:10:eb:9e:90:c3:0c:d6:6d:c1:
a4:f2:ec:f4:11:6c:55:43:ec:7e:9d:9c:c8:00:a9:b7:dd:2a:
fc:5f:39:c2:96:b9:71:dd:0a:0f:ab:73:4d:60:03:83:29:b6:
d1:8e:55:84:9e:34:26:4f:b7:c4:f6:e9:15:d8:e6:5d:71:7e:
95:5c:4d:a0:4f:5d:9e:c7:99:1c:3d:02:86:70:ab:03:4a:9e:
89:1f:3a:a3:83:54:09:45:4b:df:96:0c:fc:e9:86:2f:75:e9:
fb:4c:1f:01:bd:5d:68:65:70:03:17:70:f9:3c:c1:d5:75:f1:
3b:d3:50:3e:23:be:e9:32:58:74:16:87:f1:6f:08:ff:61:c4:
e2:5a:28:e9:97:e0:1f:0d:ab:4b:a4:b2:6c:4f:c5:e6:47:ca:
e4:9e:b4:90:eb:5d:fe:3c:cc:62:56:2b:b4:96:0f:dd:e5:fa:
f6:a0:15:dd:b4:88:51:b3:1c:a3:89:79:6f:fe:b3:66:12:d5:
1a:e6:d8:64:f2:e0:12:26:68:4d:d4:e8:6d:d4:12:56:37:40:
ef:3c:08:c9:ed:b8:a5:cd:35:09:cc:bd:c3:8a:56:71:1d:6f:
db:ce:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:48:06 2025 by rpki-client