Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa
File: 756558C6D19611ECB75A996BC4F9AE02.roa (raw, json)
Hash identifier: Es4xWH/MOyfkkc/RYd9IRsc0K3PRc1MXcB8ZFrJBb4Q=
Subject key identifier: 85:3C:8D:A2:44:FE:AC:08:20:93:53:20:41:50:15:4D:4E:C9:6A:E8
Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial: 0228
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa
Signing time: Mon 19 Feb 2024 03:45:06 +0000
ROA not before: Mon 19 Feb 2024 03:45:06 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 59322
IP address blocks: 43.247.16.0/22 maxlen: 24
103.225.36.0/22 maxlen: 22
103.225.36.0/24 maxlen: 24
103.225.37.0/24 maxlen: 24
103.225.38.0/24 maxlen: 24
103.225.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Validity
Not Before: Feb 19 03:45:06 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d2cec2-5ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:25:b3:b5:dc:ea:63:76:5f:77:e8:f8:29:
a2:ec:0b:d1:74:fd:51:85:a7:74:c7:04:ea:b1:f4:
8b:e8:2e:06:66:be:ea:d2:8a:2c:c2:ca:bd:77:bd:
6c:7a:f6:95:d0:a4:17:02:66:a5:ef:b3:03:0f:02:
28:52:b9:3b:2d:19:9d:84:44:71:b2:38:dc:d6:48:
26:03:27:d8:61:85:c0:88:4e:40:dc:82:0d:07:f8:
7d:92:ac:fe:de:b9:60:e0:63:88:ea:62:84:51:7d:
09:4b:af:dc:5f:24:ef:5a:e2:de:13:f6:e0:c4:e9:
14:8d:28:aa:a6:e9:fa:54:45:d3:2f:f2:33:61:65:
c4:07:6b:9d:a4:23:87:6f:a2:37:88:a3:49:3b:e2:
b3:03:5b:35:96:30:83:2c:fc:4c:fe:21:e5:82:c7:
df:95:ac:77:99:cd:1e:d3:25:c6:dd:5a:fe:26:30:
58:c6:bf:45:d5:bd:a1:27:36:64:d6:64:4d:eb:12:
90:12:f7:bf:5b:fb:05:47:85:0f:49:6f:1a:bc:5c:
ce:64:77:cb:17:fd:e0:42:dd:d2:b0:ef:45:2f:68:
57:ef:86:f8:2b:8f:5a:6a:7f:87:38:24:c1:be:3a:
28:eb:3d:9d:67:94:c3:20:bc:fc:16:f9:cb:ba:b4:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:8D:A2:44:FE:AC:08:20:93:53:20:41:50:15:4D:4E:C9:6A:E8
X509v3 Authority Key Identifier:
keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/756558C6D19611ECB75A996BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.16.0/22
103.225.36.0/22
Signature Algorithm: sha256WithRSAEncryption
46:60:0e:92:76:61:f6:87:5f:a1:50:5e:b1:f8:61:bf:49:f0:
c0:14:68:b8:24:47:ee:52:6f:d7:22:14:bf:72:f5:f7:56:92:
53:a9:ae:84:2a:81:e8:b2:55:3b:ea:9b:28:9c:43:56:99:06:
62:98:57:85:30:ab:81:13:fe:76:93:0c:87:10:a9:ac:35:2d:
ca:f3:fa:5b:f6:90:59:c2:29:1e:bb:8b:00:4e:11:ee:ba:bb:
db:8a:0b:44:1c:61:b2:e3:c9:1a:56:04:20:41:b9:77:6f:9e:
7a:af:42:98:4a:13:a7:9d:da:18:a4:3a:0c:a1:69:ca:5f:ee:
77:54:52:12:c6:ab:7b:a6:b2:f6:f7:a2:02:d6:f9:23:64:18:
52:6e:f7:bd:da:7b:f4:6a:68:bb:9f:67:14:9d:1e:32:26:db:
d7:b0:42:55:fe:9d:e6:f9:5a:bf:70:2c:9b:43:e6:4e:41:a1:
4b:73:72:d4:75:85:13:fd:bb:8c:f3:36:d4:d4:3d:f6:7f:26:
49:15:75:1b:23:6a:f7:cb:40:36:e8:f1:4d:ef:0a:bc:28:64:
5f:3e:82:e4:f0:49:ef:5e:ab:3b:87:b9:02:4c:bd:c4:89:6a:
16:b5:0d:66:0e:77:5f:05:c6:3b:6b:30:9d:83:4f:35:06:11:
32:c9:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:01 2025 by rpki-client