Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
File: 26A7AD3CBCEA11EF8B15B963C4F9AE02.roa (raw, json)
Hash identifier: NIkIlK6PYVblk/b10VV99eCfawXco9+WWJ0yiTeebmk=
Subject key identifier: F6:9E:08:37:A8:05:F3:99:7E:F6:9F:F6:F3:05:62:BC:66:95:CF:C0
Certificate issuer: /CN=A918E157/serialNumber=BAE5630D2A61330FACBA37F8CCFDCF892807F045
Certificate serial: 06A6
Authority key identifier: BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
Signing time: Thu 19 Dec 2024 11:36:12 +0000
ROA not before: Thu 19 Dec 2024 11:36:12 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 15830
IP address blocks: 103.20.246.0/23 maxlen: 23
103.20.246.0/24 maxlen: 24
103.101.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E157
Validity
Not Before: Dec 19 11:36:12 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6764052b-d3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:1c:06:3f:00:d3:e0:a9:92:da:92:65:22:
52:0e:c5:ef:57:7a:17:83:7d:45:bd:bc:55:bd:53:
55:c6:90:0c:8a:ca:64:87:28:23:c9:65:ef:73:07:
92:f8:72:71:33:c4:fb:0d:df:e0:22:05:64:bf:5b:
a3:cc:bb:e3:25:6c:72:cf:f1:68:9c:e1:e8:c2:25:
c0:76:fc:25:e1:39:9a:72:7b:1d:a9:f2:95:76:23:
25:69:77:03:40:1d:eb:ec:b6:cb:a0:ea:51:d8:dd:
fc:ed:b7:21:60:74:23:80:27:57:20:92:2a:2c:59:
49:43:c2:ce:01:a1:92:85:82:a7:9c:1f:c7:95:1f:
d5:87:a3:a3:36:ca:c0:50:4d:06:82:bd:b2:91:4c:
14:38:89:49:5e:df:63:ac:d3:4f:1d:3c:e6:58:28:
b3:20:02:8f:85:4e:3b:53:00:c9:e5:11:3b:7a:b4:
7e:b8:d8:21:de:9b:d7:c8:36:e8:f5:4a:b3:cf:6a:
98:96:67:d1:5c:6f:ed:b3:10:cd:72:eb:f2:bd:0c:
8a:f6:86:22:0a:81:4a:5e:0f:d0:36:fe:6b:2d:c2:
63:c1:ad:c3:47:6f:da:20:47:aa:d1:ea:7a:c3:78:
13:50:4d:07:cd:87:56:39:ae:b2:83:6b:ce:19:8a:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:08:37:A8:05:F3:99:7E:F6:9F:F6:F3:05:62:BC:66:95:CF:C0
X509v3 Authority Key Identifier:
keyid:BA:E5:63:0D:2A:61:33:0F:AC:BA:37:F8:CC:FD:CF:89:28:07:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/uuVjDSphMw-sujf4zP3PiSgH8EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uuVjDSphMw-sujf4zP3PiSgH8EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E157/E3AF949C59E011EBA9161352C4F9AE02/26A7AD3CBCEA11EF8B15B963C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.246.0/23
103.101.166.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ad:63:9d:75:c0:18:0a:e9:48:5f:c8:be:20:58:fb:82:f9:
e5:33:9f:7a:aa:06:ee:be:a7:2a:50:d8:06:f3:88:02:db:17:
23:e0:88:cd:8e:5e:1f:45:71:ea:7a:d2:13:b4:fc:ab:a3:07:
5a:ee:c4:fb:95:11:42:e0:95:43:ac:e2:f9:f7:94:27:12:98:
47:ab:01:00:b1:65:17:5a:37:d5:a9:5c:ac:18:2e:4c:86:16:
b6:50:8a:68:69:53:c2:05:3d:13:10:7b:e5:29:d5:6a:c8:9d:
22:7c:96:3b:f8:64:76:db:1c:69:6d:c3:9a:f7:17:ea:22:3e:
67:d5:47:a5:45:4f:37:69:e4:fc:3f:e0:56:24:73:5f:ab:68:
66:24:81:f4:bf:f7:cd:da:a3:12:e3:b6:1a:c2:dc:b9:6f:46:
56:d4:54:52:9b:a4:83:20:41:16:62:9d:3f:4d:b5:f8:53:2b:
13:ce:1d:39:93:59:0a:6b:96:5a:b7:c2:38:6f:e9:b7:16:61:
55:f8:c6:ea:a9:e7:e2:ee:81:b7:11:21:70:80:05:b9:de:c8:
09:9b:84:79:c2:a7:a8:9e:ea:02:a7:68:ec:be:4b:0f:61:47:
c6:1f:ee:b4:b9:4b:a6:aa:b9:b9:7c:ec:c7:6f:da:7e:bb:85:
52:82:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:19:26 2025 by rpki-client