Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa
File: 5C8929C8839011EAB5B82263C4F9AE02.roa (raw, json)
Hash identifier: atQ52lsTxZasOxqKolWrRots3HMHTfhpCYR06cscie8=
Subject key identifier: 69:B2:F7:00:EC:DF:F1:E1:5A:AC:7E:D7:BA:B0:8F:C1:C2:A7:70:14
Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial: 08CE
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa
Signing time: Thu 22 Feb 2024 21:19:03 +0000
ROA not before: Thu 22 Feb 2024 21:19:03 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 18106
IP address blocks: 103.208.176.0/22 maxlen: 22
103.208.176.0/24 maxlen: 24
103.208.177.0/24 maxlen: 24
103.208.178.0/24 maxlen: 24
103.208.179.0/24 maxlen: 24
137.59.184.0/22 maxlen: 22
137.59.184.0/24 maxlen: 24
137.59.185.0/24 maxlen: 24
137.59.186.0/24 maxlen: 24
137.59.187.0/24 maxlen: 24
2404:4280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Validity
Not Before: Feb 22 21:19:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d7ba46-0684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:95:13:4f:13:c6:d7:f9:29:26:15:13:a2:
0f:7a:f4:10:8b:54:de:2f:ca:7e:ad:68:ba:f2:09:
97:5d:4c:ea:a8:ac:95:88:3b:62:98:bb:e4:a6:0a:
4e:b3:c9:bb:44:10:d1:9b:b9:95:d3:f6:fd:99:47:
9d:e7:0b:56:ef:dc:bd:a6:2c:1c:4e:4f:0b:80:e3:
cb:d6:b2:ff:65:cb:66:e1:f6:16:be:f5:b0:b3:c6:
5b:f7:28:2e:7e:77:f9:8a:c8:10:38:22:c7:2c:e4:
ee:82:13:67:bc:2d:c6:9f:eb:c9:0c:10:e0:13:54:
b1:ce:7a:29:57:46:6c:94:3c:98:b7:57:3b:92:60:
42:34:2a:28:34:18:78:e7:84:70:24:9d:41:56:9d:
79:1e:87:7f:78:b7:5e:1f:96:98:b6:84:4b:6a:4e:
bc:00:3b:1f:2a:2f:8f:bd:a4:54:40:2f:e9:ab:5e:
98:9c:1b:28:d4:01:b6:5e:5a:33:e3:a4:5b:27:cb:
4c:38:74:db:67:aa:0a:b2:3f:86:e3:9e:40:29:26:
3d:b2:cb:9c:84:a3:32:64:30:34:f0:08:1f:d4:bb:
7b:8a:33:77:1d:36:b9:23:19:db:f4:a2:f2:21:66:
8e:02:f7:08:f7:38:6f:58:48:a7:ea:6b:f5:b2:44:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:F7:00:EC:DF:F1:E1:5A:AC:7E:D7:BA:B0:8F:C1:C2:A7:70:14
X509v3 Authority Key Identifier:
keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/5C8929C8839011EAB5B82263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.176.0/22
137.59.184.0/22
IPv6:
2404:4280::/32
Signature Algorithm: sha256WithRSAEncryption
37:e6:41:18:99:b3:33:89:c5:b5:da:85:27:48:26:62:8f:c6:
94:a6:e0:3e:cc:a1:30:0d:c9:68:da:78:53:6e:7e:bf:d4:90:
0d:cf:6f:79:f1:a2:98:ac:47:ee:df:97:6d:a1:12:49:ac:62:
9d:1f:68:da:f0:69:59:98:43:67:90:fa:99:9d:a8:93:12:8f:
c8:79:f7:f7:7c:48:fc:8e:87:4d:c7:35:bc:96:7d:63:a8:ea:
66:5a:12:25:80:03:7f:dc:49:39:89:82:5a:f8:3e:41:03:f2:
b6:a0:a4:42:64:51:6d:67:6e:ae:dd:9b:57:b2:87:ff:f5:9a:
92:0f:c2:27:0a:5c:34:fa:1f:ba:05:fe:81:26:d5:18:75:3d:
43:14:65:1e:4f:f7:57:63:c8:f5:e1:1b:09:68:9d:1a:44:57:
bd:75:52:8f:87:22:40:0a:ca:ec:d1:2d:5d:c7:11:23:06:60:
2a:33:0d:09:8e:ce:8a:42:83:f1:ee:e4:0d:ec:cb:70:dd:a4:
42:13:36:53:a2:e7:36:7f:45:f1:f8:42:b3:6f:74:d9:92:dd:
5a:c7:66:16:2a:dd:1c:e3:9f:64:60:a1:f6:3b:e5:05:bf:d2:
3d:93:64:da:95:3f:48:03:d2:74:20:19:af:89:68:e1:85:93:
e0:f4:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:53 2025 by rpki-client