Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
File: E3105D04777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier: pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=
Subject key identifier: 33:D5:47:F2:9A:D1:54:0C:54:D2:A1:49:F8:F6:1F:8D:48:0E:BB:67
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 0A
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
Signing time: Fri 20 Sep 2024 18:43:52 +0000
ROA not before: Fri 20 Sep 2024 18:43:52 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 59253
IP address blocks: 103.64.18.0/24 maxlen: 24
103.64.19.0/24 maxlen: 24
2405:a280:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Sep 20 18:43:52 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66edc268-ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:d2:b6:94:9c:55:bf:5a:82:fd:44:5b:43:
5b:6f:ed:14:28:24:cc:e9:c2:a7:b6:f2:63:6d:5c:
69:43:eb:c1:48:bc:b5:65:3c:66:60:12:f6:d2:15:
28:b8:a3:88:af:8b:d6:44:96:a2:17:bd:64:8d:ed:
13:53:6a:40:5f:21:90:84:02:78:62:07:fd:54:01:
81:38:cc:e3:9d:63:ec:fc:85:fa:19:cb:56:ad:de:
89:a5:a1:ea:39:81:06:81:63:28:23:5a:00:4b:db:
a5:4e:c6:33:eb:0f:6b:1e:13:8d:4f:c2:62:5d:0f:
58:1c:30:53:4c:bb:9d:4c:97:c4:e3:91:ec:67:8f:
cf:1a:3c:88:64:21:64:d0:9d:37:84:d2:80:b3:37:
66:94:6d:8f:81:72:41:05:28:4f:61:79:b1:71:a4:
13:4c:04:48:a0:97:fb:d5:36:04:be:e1:b4:fd:0f:
a6:5f:6e:98:24:cb:2a:4f:06:74:b3:0c:70:3e:3e:
9c:c3:c4:2f:7d:77:49:50:44:e6:36:57:df:8f:68:
9b:83:ae:4a:02:6b:e4:94:fb:2c:a2:56:d2:2e:6e:
57:54:f4:ad:75:4c:88:c2:ee:b4:90:e5:c1:a9:33:
da:20:54:d3:f2:bf:60:14:bc:4a:be:a8:aa:0d:77:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:47:F2:9A:D1:54:0C:54:D2:A1:49:F8:F6:1F:8D:48:0E:BB:67
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.64.18.0/23
IPv6:
2405:a280:22::/48
Signature Algorithm: sha256WithRSAEncryption
06:0f:55:a6:c5:23:89:55:fc:88:45:aa:08:7b:8a:07:28:4a:
5a:16:0f:55:fd:cf:e4:bb:ba:72:12:47:95:9c:ff:14:9b:72:
7a:7d:b3:3e:dd:af:c2:b1:66:96:4f:b2:ae:e9:db:e6:94:ec:
0b:66:10:85:08:6d:5f:b8:e9:29:13:90:33:60:66:08:38:fc:
1d:c3:ab:f1:e5:58:12:c5:ab:3e:e2:17:18:2f:3e:ae:db:94:
6a:c4:28:0f:01:ea:f5:20:d7:58:24:b1:36:4d:99:5f:02:62:
ba:b6:06:36:dc:3b:d9:63:0f:70:b2:42:b2:62:20:f4:ab:35:
9a:fd:e8:e5:91:56:95:f9:d8:1d:6a:a8:8d:96:22:a1:b5:d3:
b4:93:fd:e3:ec:94:84:75:d1:c8:33:d7:8b:cc:ac:71:49:4f:
f8:ac:f0:2b:50:58:7c:ca:96:a5:1a:d1:7a:75:f9:cb:b6:61:
da:70:bf:ac:fd:4d:52:58:d8:3f:04:cb:90:71:80:89:2d:2c:
b2:ba:c1:a8:e4:e7:88:9c:71:f7:be:2e:37:5d:31:ef:a8:e1:
93:75:f4:7f:e5:12:04:e2:b0:1f:b3:40:cf:df:f0:ad:c7:55:
6b:77:80:6e:e7:87:dc:db:2f:fa:61:1f:70:b8:4d:00:6f:80:
bd:7e:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:51 2025 by rpki-client