Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
File: 20322C32233F11EB9E4D160EC4F9AE02.roa (raw, json)
Hash identifier: lrl1tRk2JdR+wZm+lb4rU5vKP0772nsEIgo+g149+PM=
Subject key identifier: 98:EA:27:A4:10:07:38:70:7E:43:0E:6C:62:B1:3E:20:28:5C:3E:54
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 06F7
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
Signing time: Fri 04 Oct 2024 22:03:23 +0000
ROA not before: Fri 04 Oct 2024 22:03:23 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 38880
IP address blocks: 103.198.40.0/24 maxlen: 24
103.198.41.0/24 maxlen: 24
202.129.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Oct 4 22:03:23 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6700662b-d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:6b:10:d1:5d:75:76:ca:b2:0b:e6:97:73:
bd:95:5c:0a:46:aa:ac:bb:8e:cc:1b:b8:95:77:91:
9f:92:15:70:71:a6:5a:88:f2:0a:a3:83:d3:06:07:
d3:d2:fd:6b:46:73:c6:f1:75:12:88:4c:e6:03:14:
2a:c9:a6:db:3a:c3:95:bb:1e:ae:db:53:e0:4d:a9:
c8:69:ba:67:e0:de:8c:0b:a3:2d:87:90:57:d0:b8:
40:b8:fd:12:68:e1:34:89:94:78:c9:91:75:48:f0:
c9:fd:73:c4:85:cd:56:e6:32:fb:f6:d4:8f:84:6b:
66:cf:6f:bd:bb:7e:25:9e:6c:78:f3:d2:67:11:bb:
f6:5d:0e:46:c4:82:4d:3b:7e:eb:02:9e:90:a4:ee:
5c:1e:ed:99:c3:e0:cd:fd:da:5b:9e:0c:d4:16:ba:
b7:04:6b:c6:2f:da:83:43:0c:ef:46:4b:8f:ae:32:
b8:16:cb:02:2c:8b:30:3f:56:08:22:0f:2b:66:f6:
c2:dc:a8:0b:88:74:d0:0a:88:ed:75:aa:21:87:bc:
15:2d:ff:88:5b:9d:02:d8:e7:10:c1:e2:b6:d2:31:
b3:60:91:c8:6e:8d:5f:bf:aa:f1:63:b6:61:10:3e:
7a:ae:4e:15:ab:f9:2b:20:a6:54:75:6f:17:e4:c8:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:27:A4:10:07:38:70:7E:43:0E:6C:62:B1:3E:20:28:5C:3E:54
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.40.0/23
202.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
21:32:a9:7b:7f:eb:d7:ea:2d:dc:a9:7f:29:65:e2:99:43:d0:
27:22:f3:d1:35:cb:56:18:c1:ab:7b:c2:13:71:e4:47:e9:34:
98:ed:29:04:08:fc:c3:e3:b2:fa:fb:80:3a:38:46:31:70:a4:
67:10:b4:15:d1:0b:c5:7b:b2:cd:cb:e2:60:80:47:a0:ce:f2:
d5:b1:2c:da:a9:6c:ba:bb:2e:c7:73:57:3d:05:80:ad:8e:cd:
3c:45:ab:bd:de:f9:bd:eb:e9:46:9a:ea:4b:41:2a:12:04:dc:
f2:0d:b4:68:8c:f9:0b:a1:36:3c:f1:3b:87:e8:c5:5f:33:5c:
f8:4a:f4:b2:ab:69:ec:73:62:51:e3:f0:20:c2:13:f0:f2:5a:
77:ea:c5:8c:4d:9c:60:c0:a4:07:82:c5:7c:99:6d:03:2e:30:
46:ff:82:98:83:15:8b:a0:ec:e3:7e:bc:20:94:7f:79:24:2c:
e5:49:26:a6:a7:11:63:d8:2b:5f:0d:97:7a:db:4e:45:ca:b5:
8d:ed:3b:39:9f:86:39:f2:2e:d9:ac:c5:89:40:87:b2:67:fc:
8d:6b:b4:94:ca:e7:ef:31:73:e6:18:88:1f:00:e9:43:7c:4e:
ba:a9:fa:fd:36:75:7f:ce:d6:1e:63:f7:6f:52:d4:aa:5a:28:
92:bb:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:08 2025 by rpki-client