Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BEDFED813EC11EE98EC7B10C4F9AE02.roa
File: 8BEDFED813EC11EE98EC7B10C4F9AE02.roa (raw, json)
Hash identifier: KqJtc01yHc68VBpABXWKYioMOcgp4KFxob+IBmSbqa4=
Subject key identifier: 24:D4:F1:98:FF:1F:67:D7:6F:25:CC:EF:E8:32:D1:D1:E7:6A:00:DA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8994
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BEDFED813EC11EE98EC7B10C4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:25 +0000
ROA not before: Thu 30 May 2024 15:59:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134299
IP address blocks: 103.76.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35220 (0x8994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:59:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a25c-0b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:3e:91:15:3f:7e:b9:57:ef:ad:03:26:bf:
6a:ff:10:3a:80:1b:2f:2c:e6:ed:84:b4:2c:0c:7a:
a5:24:58:6b:57:99:4c:cb:ed:f6:56:ac:48:7f:69:
d9:e1:cf:e4:54:c7:36:f0:74:b1:20:13:a5:42:17:
67:0e:a1:b8:a6:0a:88:d6:4a:50:4f:81:f5:06:2b:
e8:97:d2:7c:21:9b:b9:24:06:bb:28:f2:99:68:b0:
dc:39:51:a6:53:56:2c:5b:5c:f8:da:1d:5b:ab:3b:
a9:39:c1:c6:f3:a2:34:46:69:16:0c:1f:ec:c7:db:
dd:90:10:2b:5c:df:d6:5b:74:b9:25:35:02:89:56:
56:8f:8a:0c:b0:62:09:10:a4:de:a2:43:68:51:05:
c8:31:25:11:00:62:cc:af:16:ae:21:69:4e:42:07:
b1:d4:02:e2:1e:10:ce:22:d5:bf:f6:8c:4b:d2:11:
ff:85:3c:a1:7a:97:c4:1f:3b:3c:13:d4:6b:64:3e:
1b:18:19:e2:5d:ca:e7:30:11:fe:53:a8:c7:3e:cf:
62:be:0f:9d:f3:fa:e5:78:74:e5:67:a8:92:13:e7:
25:39:72:3f:5e:38:c3:04:ba:1c:f2:39:2c:96:97:
32:b1:ef:0c:d2:70:01:05:de:85:6d:c3:19:4f:0e:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:F1:98:FF:1F:67:D7:6F:25:CC:EF:E8:32:D1:D1:E7:6A:00:DA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8BEDFED813EC11EE98EC7B10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:dd:6a:67:7e:1c:01:c5:35:70:b3:80:42:bb:08:3c:a3:59:
0d:95:e8:80:ca:42:0f:85:5e:32:4b:3d:c5:df:0a:f1:d1:1b:
98:8b:8a:2d:22:c2:69:25:d4:2b:bf:03:8f:b3:b7:e0:1a:c3:
b2:db:dd:79:f9:29:8e:a7:12:11:4e:ac:4d:3a:01:44:f1:e8:
b2:67:96:08:a5:ef:63:d1:13:a6:d4:8d:92:64:0c:1a:03:41:
14:39:74:1b:29:8b:3d:13:d8:81:d3:71:5b:97:5a:eb:b7:a8:
d1:01:13:48:d3:a6:34:ca:9c:b0:eb:9a:59:24:92:fc:b7:15:
74:da:05:c2:c7:9a:88:1a:13:34:18:19:7c:fc:dc:12:93:e9:
46:4c:62:c3:95:2f:e5:9c:15:e6:47:22:51:15:14:aa:02:64:
80:d1:2a:7a:8f:e7:5f:03:92:74:a0:4c:24:e0:68:83:f0:68:
06:bb:ec:b2:77:fc:3e:9a:0e:30:ef:ff:3f:14:65:17:aa:34:
14:fa:17:63:07:27:c7:28:e1:9d:65:df:29:dc:d0:e0:35:84:
84:4d:6e:68:e1:43:83:25:3c:c8:14:d5:56:3c:00:3a:2b:5c:
2f:db:39:18:6d:a6:7d:78:6f:8e:4e:80:50:c4:16:ab:a0:80:
09:8f:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:14:32 2025 by rpki-client