Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
File: 7494BE70EEAF11EB9FF10D4FC4F9AE02.roa (raw, json)
Hash identifier: jek6r90t3rY8dry0A6++oJA60sHALGTg42i7Z3FM0wg=
Subject key identifier: DF:CC:61:F9:98:1B:D4:8B:C8:9B:2A:98:94:9B:93:56:58:F9:22:21
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8E1B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:18:21 +0000
ROA not before: Thu 30 May 2024 16:18:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142504
IP address blocks: 103.170.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36379 (0x8e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a6cd-fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:98:7c:ce:cf:26:81:36:3e:c0:84:91:95:
08:6b:cf:6c:bc:b1:23:4d:c9:e0:fd:d0:e1:70:cf:
c1:cc:af:b2:1c:16:8b:46:a1:31:16:f0:f5:72:4f:
ec:88:dd:f6:72:4c:b3:08:77:e0:81:2e:1a:b7:24:
d9:89:e5:94:31:21:dc:3f:a2:95:47:db:fb:fc:b9:
d0:0d:a6:ec:d3:e7:25:0a:e8:ba:bd:3a:7a:10:89:
b3:62:0f:d4:47:9f:cd:d4:3d:4d:67:0d:43:27:59:
1d:99:06:45:94:32:d3:96:86:c3:25:f4:90:86:b0:
37:3d:4a:14:ce:68:21:27:8d:6e:cf:d3:85:31:ba:
76:2a:74:8a:a9:27:5a:ca:c5:50:cd:71:2d:fd:9d:
87:a8:ba:8c:c1:c0:1f:e7:98:3a:e8:b3:c9:e6:5c:
26:c0:7e:01:c3:d8:2c:10:3e:d0:f1:07:50:d6:1a:
a1:7d:14:43:24:1d:7d:ce:72:04:16:72:29:8a:d8:
f2:68:fd:dc:ba:e0:80:82:d0:8f:d7:6f:0f:b8:57:
7f:0f:33:b9:23:59:60:d9:9b:3d:6f:9c:92:1f:c5:
c7:e6:40:73:24:30:c6:fb:9d:dc:13:6b:c2:9f:29:
dd:67:f7:f2:02:16:cd:de:e8:f1:d3:3f:68:8a:23:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:61:F9:98:1B:D4:8B:C8:9B:2A:98:94:9B:93:56:58:F9:22:21
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9d:87:68:18:ce:32:d2:ea:ea:dc:80:01:92:54:5c:73:0a:
cd:39:8d:bc:e8:25:f3:6a:49:df:06:a5:8d:c2:d7:f1:95:4c:
15:33:92:8e:38:01:d8:86:4a:1c:f3:78:17:69:f4:4a:38:92:
ce:cf:26:75:ae:9b:9e:e7:13:83:b3:3a:fe:5f:ee:9a:10:61:
ca:d7:f7:dd:b4:95:e4:be:d5:a1:56:29:5f:94:1a:4b:f6:5e:
7b:6d:b8:e8:6b:61:6a:7c:2e:ec:6a:b5:db:48:df:28:a1:52:
30:2b:5e:db:28:93:0d:5d:8e:8a:eb:6c:ee:0b:68:c6:50:f9:
81:56:b1:35:71:ba:e2:44:1d:a2:9a:2b:c2:dc:17:3c:27:a7:
03:dc:b0:f8:f3:47:89:0d:ff:80:52:3b:8e:be:97:0e:3b:73:
09:be:7b:64:64:a0:9c:10:da:ae:39:ae:1a:d6:dd:34:0b:7f:
67:b6:cf:d5:65:53:20:4b:4a:82:2a:fb:6c:53:f8:dd:0e:16:
09:42:6b:88:74:7a:3a:f5:b8:86:4b:be:f1:65:32:ab:39:ea:
85:eb:1e:39:bb:c4:b1:19:43:10:9c:5f:7b:ab:34:67:ed:c4:
19:f9:b2:81:39:d1:e2:f0:29:b2:da:96:63:c5:45:4a:90:1d:
7f:ba:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:23 2025 by rpki-client