Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E51F846F72911EA8B82EB48C4F9AE02.roa
File: 9E51F846F72911EA8B82EB48C4F9AE02.roa (raw, json)
Hash identifier: oE/SE0YMmKWoKNvXeUmvBxpcrb6KtdHXB0yMVv6ZKBM=
Subject key identifier: 18:AF:1C:5C:A3:59:CB:4D:F0:98:0B:B8:77:76:E1:04:DF:E5:28:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8882
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E51F846F72911EA8B82EB48C4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:50 +0000
ROA not before: Thu 30 May 2024 15:54:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132778
IP address blocks: 103.73.32.0/23 maxlen: 24
103.144.36.0/24 maxlen: 24
103.162.216.0/23 maxlen: 24
103.214.96.0/24 maxlen: 24
103.250.187.0/24 maxlen: 24
2001:df2:6a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34946 (0x8882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a14a-e74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:8d:14:a5:1f:9d:2d:d5:10:00:33:8a:fb:
19:48:9f:9b:ea:a9:33:1e:09:0e:c1:b9:5b:8e:f9:
0b:99:27:b9:55:db:78:c2:9e:12:7f:ea:da:b0:bd:
a1:93:d5:a8:bf:ed:82:5f:07:8a:12:c3:5d:a4:cf:
25:0e:0b:e9:b0:19:0f:c7:c6:d0:3b:64:78:31:ad:
10:c7:7d:a3:c4:69:16:72:fb:37:3a:b6:85:5a:0c:
b1:16:94:28:d1:71:2c:ae:b8:1e:ab:b3:56:81:6c:
f7:f3:fd:f0:99:40:05:78:00:f7:02:7f:a1:8d:ef:
fc:c2:70:f1:0b:1e:78:ca:69:60:43:5a:84:d1:db:
76:8a:6e:04:5f:6b:a8:16:ee:fe:95:dc:72:7b:78:
44:b8:87:f5:49:e3:66:3a:d4:21:1a:7f:2b:a4:7b:
b7:2f:b7:c3:0c:e5:27:1a:b2:e7:fa:73:cc:e3:3a:
ea:de:e7:b1:e3:5e:1e:ca:49:2a:1f:a8:5e:70:60:
55:a7:96:d3:44:37:36:b3:bf:f9:81:89:5f:48:38:
d4:ca:e9:49:b3:9f:15:28:3d:c9:68:16:8d:c0:9e:
45:42:43:fa:95:70:f1:d6:ed:31:85:d4:0b:98:21:
78:ed:e1:4e:28:3b:05:ab:b3:c7:1d:96:57:2c:f9:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:1C:5C:A3:59:CB:4D:F0:98:0B:B8:77:76:E1:04:DF:E5:28:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E51F846F72911EA8B82EB48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.32.0/23
103.144.36.0/24
103.162.216.0/23
103.214.96.0/24
103.250.187.0/24
IPv6:
2001:df2:6a40::/48
Signature Algorithm: sha256WithRSAEncryption
3a:25:8f:2a:59:e2:b6:90:12:6f:07:50:dc:83:83:1a:89:b5:
c5:5b:14:bf:4f:3d:70:dc:75:11:d6:29:2a:8c:5b:bc:ab:47:
67:cb:88:02:dd:53:9a:47:a2:46:f5:20:a5:e5:06:a6:ba:e9:
68:17:c2:ed:d5:c3:19:c2:31:16:e3:eb:af:f0:cf:24:5b:80:
a9:00:2a:14:b0:c6:f4:61:12:6a:f1:84:a5:0a:2d:aa:c8:c3:
15:98:c4:36:8b:3d:4e:24:bf:a1:a3:6a:96:02:9c:41:62:07:
c7:9a:44:d8:b5:7a:5b:31:56:52:8e:ce:c7:b6:a6:a1:81:c8:
99:e3:ba:ab:4e:62:98:17:a6:16:e6:d6:b8:b1:23:92:1c:a1:
e5:af:5c:1d:a7:27:7e:7a:ed:29:b2:a7:7b:6a:f2:74:75:7a:
04:a8:4e:bb:ed:df:58:61:14:20:2f:5d:68:61:7a:1a:60:41:
cc:30:25:5c:46:55:c3:7e:1a:8a:24:75:c6:77:4b:0c:a1:47:
aa:81:e5:5d:db:cf:44:e3:77:15:0b:51:33:51:22:59:ec:29:
af:65:cb:bc:d3:b3:75:1d:ea:8e:25:34:56:26:3c:ae:80:d5:
d4:18:21:4a:29:1c:e8:1b:80:ac:4d:c1:10:5a:79:a5:3f:b6:
52:86:57:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:41:41 2025 by rpki-client