Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa
File: 76D93B7CB13211EF942ED23FC4F9AE02.roa (raw, json)
Hash identifier: m1kGs1EgQd2x8yRTedjfIFQKDfSZm/Inde39YEz/alk=
Subject key identifier: E6:DD:DF:EB:49:C9:BB:F7:A3:24:79:EE:77:51:72:DE:67:EC:77:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E68
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa
Signing time: Tue 03 Dec 2024 04:52:57 +0000
ROA not before: Tue 03 Dec 2024 04:52:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133291
IP address blocks: 103.94.174.0/24 maxlen: 24
103.94.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40552 (0x9e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 3 04:52:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674e8ea9-742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:1b:a6:50:75:06:99:a9:00:5f:d4:77:44:
17:ed:d9:5d:f8:d0:3e:77:34:55:87:04:c1:62:98:
80:90:ce:c7:da:ac:13:04:f9:32:5c:cf:9b:22:c7:
75:9e:e8:9a:2e:62:7f:c8:e8:5f:80:2c:cb:c8:e1:
67:e4:f7:f9:43:9f:48:d9:f3:c5:ec:7f:25:99:ad:
ab:a3:f6:28:52:34:b9:0a:ad:f3:6b:4c:59:f2:d5:
da:a7:98:7b:42:5c:0f:eb:59:e7:c7:71:03:22:dd:
e5:49:e1:15:4b:88:52:a4:d6:f7:2f:fb:81:ea:d4:
4d:2b:ca:38:83:76:a9:a7:6c:b6:69:64:46:5d:ad:
e7:cd:41:44:63:81:ff:9d:ae:12:5c:bb:75:b8:1e:
80:98:10:ca:45:9b:74:15:a9:8a:55:9f:40:de:a5:
32:05:eb:51:9c:b9:3f:84:a0:39:02:5f:65:b4:2d:
d7:24:e8:b2:db:f1:6e:3e:87:9d:03:a0:fe:55:6b:
2d:85:82:86:2f:e3:7f:db:b3:51:f3:f0:b3:96:00:
36:85:5f:19:1d:c6:38:b1:ba:ee:da:8a:43:b1:a6:
8d:b9:24:2f:d3:df:d4:a5:4c:5a:01:b1:c2:98:47:
9a:e3:91:94:71:3c:4a:44:aa:73:12:39:3d:cb:84:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:DF:EB:49:C9:BB:F7:A3:24:79:EE:77:51:72:DE:67:EC:77:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/76D93B7CB13211EF942ED23FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:97:79:ec:d6:a1:ea:25:b5:18:6a:8e:f4:bc:18:70:9c:84:
14:41:2f:31:01:fa:4a:bb:a4:da:7d:2e:5e:11:84:e6:9a:4b:
e6:7f:65:f2:86:67:fb:8d:7c:1e:d2:f4:6c:3d:a2:74:c7:3f:
b6:6c:55:e8:6b:9f:49:1f:06:27:ee:08:55:4f:44:5f:0a:c1:
b2:12:e1:dd:c8:e3:d5:f2:f2:f9:85:ac:37:6f:ab:83:96:8b:
95:77:26:90:6e:4a:0d:ca:63:b5:85:04:a4:53:86:7c:d8:40:
2c:d2:18:67:80:da:3f:9c:7d:1f:c8:41:a4:04:de:0c:71:94:
0e:50:ef:0c:09:d6:a2:08:d5:53:71:a1:d9:43:b7:e2:52:dc:
0a:57:e5:9f:4c:29:e6:c1:36:b5:a1:34:3c:65:6d:36:7f:e2:
e4:6c:7d:ef:bd:30:ba:28:ba:e6:84:e4:42:d6:f4:4e:26:2d:
3e:6b:77:4c:8b:04:d1:22:e3:9a:7e:30:0e:53:8e:7b:71:d7:
0e:df:c1:ce:e1:d9:4c:ae:63:00:5a:0f:57:86:3f:90:6c:05:
54:a1:9f:e7:ac:11:3e:70:1a:03:f2:91:03:08:6a:63:70:3c:
95:25:06:18:06:34:15:28:c9:df:b1:2e:83:19:14:de:ab:be:
3c:29:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:07 2025 by rpki-client