Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa
File: D77AB3C2BC6B11EFAA982820C4F9AE02.roa (raw, json)
Hash identifier: cgvx0hJeqstfuN8Vk0N3B2im13DHW34bZFrCU7/4n98=
Subject key identifier: 0B:FA:12:0F:FE:36:2E:0C:DC:A5:35:C1:59:B8:23:AA:11:EE:1A:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F76
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa
Signing time: Tue 17 Dec 2024 11:41:23 +0000
ROA not before: Tue 17 Dec 2024 11:41:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135133
IP address blocks: 103.37.96.0/23 maxlen: 24
103.165.94.0/24 maxlen: 24
103.170.132.0/23 maxlen: 24
2407:b240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40822 (0x9f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 17 11:41:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67616363-86f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:37:ea:60:46:14:33:e3:ae:0a:92:2e:12:
47:51:da:50:21:7a:de:71:6b:21:75:ed:62:5f:52:
57:b6:4f:71:7a:e7:d1:a4:35:01:20:8c:d6:92:6c:
48:2d:e6:36:45:5a:cd:18:fd:1e:1c:f0:52:63:ef:
1a:eb:fc:f7:64:c8:f5:0f:5f:f3:93:94:ad:cc:5e:
67:92:61:7b:5e:91:7e:e8:19:a8:aa:8b:ba:2f:1c:
41:f7:7f:0f:07:d8:ae:0e:bb:71:d9:8e:fa:30:5f:
08:d0:19:4d:68:fb:cd:ae:fb:e3:f5:85:43:98:69:
47:26:14:7f:66:8f:3c:d4:d4:41:63:cc:39:19:b9:
e6:5d:3b:54:ec:1b:f6:12:26:c7:2c:1e:09:de:61:
ba:06:13:21:fc:85:70:8f:d0:1a:83:e5:17:b6:cc:
22:45:28:94:d4:16:40:c1:d0:db:4d:ce:0c:d2:e4:
51:ec:34:b1:b8:64:a8:47:53:5b:4b:20:a0:2b:c3:
42:f4:b3:3e:64:d0:2d:e0:38:67:f5:ba:69:48:2a:
6a:21:37:cc:53:73:c5:43:5c:8f:c7:ff:10:fd:37:
69:5a:6b:88:64:6f:fc:09:1a:10:44:40:33:95:3f:
ab:42:be:bb:05:7b:35:68:e7:a3:82:b4:8f:91:58:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:12:0F:FE:36:2E:0C:DC:A5:35:C1:59:B8:23:AA:11:EE:1A:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.96.0/23
103.165.94.0/24
103.170.132.0/23
IPv6:
2407:b240::/32
Signature Algorithm: sha256WithRSAEncryption
9c:bd:fc:69:22:c1:88:8b:5a:00:43:7e:38:fb:90:f5:aa:8a:
e2:ec:ad:4c:6b:33:c9:c5:6e:76:01:ac:2c:45:12:37:f4:3b:
28:85:27:5b:da:9e:1a:3e:78:de:1a:e1:9a:6c:28:ee:e1:a3:
86:94:ed:a2:bb:9a:b2:85:28:64:54:b8:7c:ac:46:ef:2b:0a:
df:a7:15:82:74:e4:0d:0a:2c:93:56:5b:92:14:c6:ad:9f:3a:
8f:39:cd:27:34:d7:9d:77:96:8d:d0:4d:ed:f4:80:7b:a7:7c:
af:dc:2d:48:ea:93:fa:8b:84:8c:c8:af:3f:f5:f6:80:2c:74:
2f:6e:6f:89:e5:ee:b8:7a:02:45:d5:98:6f:73:82:4f:9b:21:
66:49:31:b3:e1:70:00:53:7a:40:8f:99:9f:d4:08:b4:46:01:
8b:9a:ca:cd:5d:1b:77:5a:18:32:a3:94:fe:83:de:df:46:19:
32:5e:6c:4e:6a:e5:72:d8:2d:33:d9:d1:ca:77:09:16:d0:bd:
47:7c:6f:9d:00:88:6a:c3:c6:f9:a4:24:2f:ea:9d:5c:7c:c0:
9d:43:31:36:97:84:be:71:96:f6:b3:78:b2:ea:19:5d:d3:f7:
a6:29:dc:e9:7d:57:eb:75:da:bf:53:ab:b5:fc:03:48:0a:78:
fe:a8:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:06 2025 by rpki-client