Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
File: F8A8459E839811EE9359CD1BC4F9AE02.roa (raw, json)
Hash identifier: 2itfPiZOwo3j3KkagzM0lJ9g9RDpPLuezlUCh1GPQb8=
Subject key identifier: 74:AD:74:32:90:0B:12:27:D5:B3:92:95:6E:76:A6:6A:C4:1B:DA:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8BE7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:09:07 +0000
ROA not before: Thu 30 May 2024 16:09:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138035
IP address blocks: 103.187.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35815 (0x8be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:09:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4a3-4c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:66:5e:b2:cb:3e:20:92:10:90:27:9c:f0:
11:84:f5:8f:ac:28:f5:02:cd:8f:de:a1:92:90:79:
1a:2a:04:d0:23:72:90:73:e2:71:10:cc:6d:52:a1:
3f:b2:ba:c5:52:81:ad:f4:f1:dc:1c:b6:c2:fa:19:
df:50:7e:d0:f4:09:29:51:dd:5c:44:c7:54:fa:31:
6b:27:ee:83:9e:aa:8d:57:19:79:5c:1f:4b:22:ae:
65:b1:3f:88:d6:3c:8e:98:f4:c2:13:22:40:5a:93:
9c:4c:f0:ef:9f:ec:57:0d:25:72:ea:10:64:40:d5:
6c:71:8d:e0:52:52:6b:a1:c0:39:30:54:f9:87:87:
6b:9a:57:ab:97:bf:e8:26:1c:ff:b5:6e:d0:fc:27:
3b:fa:21:db:2e:57:6f:4b:f1:5f:ee:b0:53:7b:37:
99:d0:7e:19:0e:08:d8:2e:8b:86:a9:f2:af:da:7e:
59:81:d0:d6:49:1e:72:e7:e4:8c:14:e9:69:4f:eb:
3a:d0:1d:8b:a9:23:2f:34:28:39:e9:d4:b5:28:6a:
fa:fb:0a:cb:a5:e6:8f:d2:91:00:70:c2:fc:6d:9f:
b4:77:0c:8d:a9:99:ac:8a:90:4d:09:70:4b:78:c7:
73:dc:31:6d:ce:2e:65:1e:24:98:73:23:5a:99:bf:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:74:32:90:0B:12:27:D5:B3:92:95:6E:76:A6:6A:C4:1B:DA:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:08:5c:02:26:83:93:31:2c:2d:df:9d:cd:e2:0b:91:b2:a7:
a2:35:61:df:cd:53:e9:f1:20:8c:b2:1b:7c:c2:9b:ea:a6:12:
93:b1:74:48:7a:a7:fa:f9:42:41:81:31:bd:71:40:52:cc:b7:
2d:4a:9c:51:c5:8d:9c:ba:e9:ea:c5:af:26:11:50:42:05:91:
d8:b3:4d:f6:69:7e:02:53:a9:ac:41:ec:5c:f1:32:75:f3:ec:
80:1b:fc:35:44:fa:2f:c8:b7:e6:5a:0b:db:a1:be:4b:79:89:
b1:33:77:6c:f9:77:8b:de:57:6b:9c:d9:46:ba:86:22:26:ca:
a5:41:dc:08:c4:84:f4:ce:86:51:58:77:43:d1:5d:27:fb:15:
5c:99:d6:48:6b:fa:1e:15:bf:ae:53:f6:87:90:71:1f:3c:24:
ec:d1:ef:a5:04:f7:29:c7:61:eb:b6:f2:9b:c8:f9:c7:af:60:
12:4c:88:3c:fd:1f:f6:11:88:37:d2:dd:aa:9e:9c:6e:93:10:
4e:9d:f3:4a:8d:34:71:1f:3d:d6:d4:6b:03:97:58:cc:c2:71:
9b:54:23:91:e4:3a:6f:91:54:5c:61:02:ab:7b:2f:8c:c5:ac:
1d:b2:87:c4:11:45:a3:e6:83:88:0c:f1:d5:d4:33:40:4e:1b:
76:24:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:56:22 2025 by rpki-client