Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
File: E9348B3CDD4B11EAA8892A78C4F9AE02.roa (raw, json)
Hash identifier: jIuV8Gnyjh+sXvjo/fr/2AhUkXF3S73hLRJOdiMyHKA=
Subject key identifier: 14:F9:8F:A6:47:33:B1:06:DB:3A:27:FD:98:97:2A:44:37:36:51:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8ABC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
Signing time: Thu 30 May 2024 16:04:15 +0000
ROA not before: Thu 30 May 2024 16:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135863
IP address blocks: 103.80.68.0/24 maxlen: 24
103.103.52.0/24 maxlen: 24
103.103.53.0/24 maxlen: 24
2001:df6:ce00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35516 (0x8abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a37e-8f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:33:7a:ec:32:20:da:2f:e2:3f:9c:76:d2:
3f:1f:6b:ed:33:72:92:12:a7:89:63:30:bf:38:ca:
e3:a7:12:9b:41:aa:69:16:0b:fb:25:c7:25:8b:86:
d0:42:44:25:1f:a4:6a:fc:07:25:aa:b7:4d:0d:bf:
1f:c5:a4:3c:be:0a:24:24:84:f8:34:61:c2:b3:72:
0d:0a:ed:d4:1f:63:28:67:2a:99:f0:e1:8f:a1:e9:
99:75:c1:af:d8:f9:07:38:6f:ce:1a:36:8c:23:83:
15:0f:0b:6d:12:3c:92:9a:97:e4:20:3a:e8:5b:93:
7e:47:e8:96:1b:3c:8d:9a:bf:0a:0b:c6:dd:63:bf:
1c:cc:f0:5e:86:95:db:ff:7b:4c:ae:27:c4:8b:5e:
99:7a:67:81:37:d0:80:07:10:22:c0:55:c3:3a:b5:
48:3d:35:1a:86:f6:4e:4f:a4:48:8f:7f:e8:7d:6b:
48:e3:1f:92:0b:ff:f5:45:b7:a6:7b:a3:71:bc:8e:
a1:1d:eb:ea:5c:5e:e0:80:90:f4:21:89:66:e4:1d:
94:48:58:70:1e:8b:c0:79:f2:a6:7a:8f:e5:bd:c4:
d6:6b:68:d4:c1:eb:9d:a3:bc:5e:fe:d5:47:05:70:
36:18:a8:60:df:0d:a5:8b:7f:4b:23:9b:d8:de:f3:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:8F:A6:47:33:B1:06:DB:3A:27:FD:98:97:2A:44:37:36:51:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9348B3CDD4B11EAA8892A78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.68.0/24
103.103.52.0/23
IPv6:
2001:df6:ce00::/48
Signature Algorithm: sha256WithRSAEncryption
24:c8:dc:6b:a3:c5:b6:b2:7b:99:27:a9:fe:19:72:40:7c:34:
40:68:31:7a:7b:9b:d0:fa:88:82:b2:fd:77:35:98:e7:60:84:
02:b1:03:3b:7a:e1:26:82:4d:32:8c:eb:06:c4:83:f0:8c:b9:
5c:30:1d:11:b5:30:d6:6c:7b:68:f8:1f:00:c2:30:5a:3f:4d:
a2:c3:7e:c2:af:cd:61:6b:b9:d9:7e:f4:73:2e:a2:29:2e:f0:
e6:a6:b9:2c:b8:35:35:6f:5d:ec:9e:8d:74:fc:a3:b4:41:db:
c7:cc:23:bb:79:46:8a:73:2a:b7:06:e2:e5:c3:1a:08:47:84:
8c:56:5e:64:13:4a:38:83:bd:96:83:5e:d4:45:39:63:5e:7a:
d8:f1:99:8c:e7:f1:8a:9a:89:66:df:c3:be:7a:29:ed:11:7b:
ac:68:d6:48:f2:0c:85:df:83:2b:2e:03:43:e1:b3:bc:d1:9e:
1f:5a:bb:92:e2:1f:9c:ac:5a:5b:12:01:33:b9:7a:d8:c1:d7:
0f:e0:c2:f0:3f:29:55:c4:7a:83:a0:88:2c:d9:dc:90:8c:1c:
2a:43:8f:c5:75:7e:36:71:81:32:db:fb:ce:60:75:12:24:94:
55:31:db:20:95:ad:06:62:b5:49:61:df:bc:83:9d:48:b9:62:
d6:6e:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:13 2025 by rpki-client