Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
File: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (raw, json)
Hash identifier: JuNByZogw7Q3Wr5AqPKRTQsxkAmTBvInp+ozIJH6zCk=
Subject key identifier: 7E:28:A4:F8:AD:33:8C:B2:C1:C5:2D:2C:D1:5A:97:FB:B7:DC:C8:10
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 02AF
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
Signing time: Mon 13 May 2024 04:07:58 +0000
ROA not before: Mon 13 May 2024 04:07:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 18041
IP address blocks: 103.186.118.0/23 maxlen: 24
2400:70e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: May 13 04:07:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6641921e-ac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:22:4e:db:b5:08:fe:4b:86:3c:d5:bc:ee:80:
f5:ca:a5:89:05:84:e9:f4:47:5b:03:e3:2d:18:5c:
7b:08:bb:f5:8a:a8:2c:0c:c9:32:af:57:4e:27:e1:
0e:7d:e4:5b:6c:2f:c9:da:cb:bf:a6:7b:30:d6:0b:
35:4b:01:46:99:07:11:1b:06:29:4f:23:42:89:f8:
1f:e3:71:4c:8c:64:70:36:cb:8b:e9:f5:b3:0c:4b:
02:0a:ad:64:41:78:80:18:49:6a:69:ee:47:76:e8:
ee:55:63:50:00:db:76:c8:96:1f:93:69:7a:12:8a:
ce:b0:68:17:6d:53:11:72:93:ea:28:67:81:b6:3e:
ec:dd:e1:42:89:71:1e:37:bb:e8:3b:a6:06:f3:70:
64:69:ce:e3:d5:af:38:ce:39:c6:a8:00:27:e2:7e:
30:ef:c0:ff:43:b6:9c:41:6b:a3:f6:64:70:3f:36:
b4:36:20:1b:b4:a2:17:89:07:0d:4e:65:5b:bb:85:
6d:10:3b:95:5e:e7:57:4b:63:15:47:c4:11:4b:0e:
55:b4:b2:4b:d1:5c:07:8c:48:a5:52:c4:2d:04:22:
f7:5a:03:b7:8f:66:7c:41:38:00:3a:d7:05:b7:78:
b3:4c:c0:aa:ac:2f:8a:7a:9b:9d:29:46:6f:4e:4b:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:A4:F8:AD:33:8C:B2:C1:C5:2D:2C:D1:5A:97:FB:B7:DC:C8:10
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/3B62C20EFF3911EDBCDB5046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.118.0/23
IPv6:
2400:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:d5:27:9a:d6:f7:cb:c5:0c:db:79:1f:84:1f:6f:c0:9e:f8:
d3:71:1a:15:d2:1c:ae:77:9d:0a:8d:c3:fb:09:ca:00:08:8e:
c6:8a:99:dc:40:37:4e:34:39:96:d3:59:1a:09:e5:ec:78:4c:
62:12:08:90:13:70:6c:62:a0:68:9f:b3:7a:da:ed:23:b9:59:
64:04:a3:e2:4b:1f:75:97:99:d2:19:6f:8a:52:3e:ef:9b:cd:
81:52:eb:59:60:17:2d:1d:57:58:6b:d6:24:9f:48:e4:af:b8:
4b:84:19:5c:71:e2:47:e2:c1:79:72:14:3d:5e:05:08:41:e1:
8a:71:ee:9b:86:9b:af:be:2b:25:90:86:21:62:61:6e:26:1b:
58:bf:04:40:95:b1:6b:91:78:04:95:4c:75:17:a8:ed:a8:84:
05:5b:2c:75:b0:a5:5a:75:97:81:07:37:3c:cd:51:e8:13:94:
42:2a:2d:ac:00:3f:c5:6b:55:25:0e:9d:b0:85:81:84:77:84:
66:fc:dd:46:e0:7c:2f:cc:74:8d:dc:6e:ac:93:2b:8b:15:ba:
74:60:99:88:e2:8d:aa:4d:7b:7f:b0:29:06:3c:59:ef:af:a2:
71:33:03:65:cb:04:5e:05:61:03:03:a8:71:a8:3b:2b:06:63:
25:82:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:26 2025 by rpki-client