Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa
File: CA67185A02E511EF8ED1355CC4F9AE02.roa (raw, json)
Hash identifier: wHhpRiqBr3hK50V+Phj70tryQ0HqBEHePg9PAHRjbTI=
Subject key identifier: 81:17:42:B5:07:80:DB:92:57:2D:C5:36:28:59:BF:E1:C8:14:81:84
Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial: 093F
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa
Signing time: Thu 02 May 2024 21:39:54 +0000
ROA not before: Thu 02 May 2024 21:39:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140523
IP address blocks: 103.150.18.0/23 maxlen: 23
103.150.18.0/24 maxlen: 24
2001:df3:4d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Validity
Not Before: May 2 21:39:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6634082a-e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:fa:7d:48:5e:c0:15:3f:57:52:4f:eb:e3:
a1:a1:cb:27:dc:fa:e5:b2:54:70:13:b1:6b:98:e3:
6d:84:b4:be:20:53:d4:c2:dd:71:93:79:4a:6b:81:
70:0b:90:6d:42:f1:1c:2f:f1:cc:c5:9d:13:c5:b2:
82:f9:5d:81:16:ec:ff:30:92:cc:17:ea:7d:8d:3b:
1c:12:67:2b:1f:7c:d1:69:87:cb:cf:c6:c4:94:aa:
ba:5f:30:6f:ed:25:9f:b4:f1:a9:a2:68:08:81:99:
ac:8c:0c:c9:45:db:cb:e2:ab:3c:16:35:ca:08:48:
44:d7:ee:1c:01:a2:93:c6:69:6c:05:0a:07:4e:d0:
8d:d9:79:58:58:8e:a0:77:82:16:74:9a:62:bd:ca:
c7:a8:d5:6a:a7:79:c6:c7:53:43:32:95:a7:99:00:
e9:42:fd:2d:b0:f6:78:28:9a:54:bc:1e:45:43:4f:
de:67:20:4f:e6:03:e3:24:6b:20:09:f7:13:d2:45:
20:9c:83:ad:0c:06:52:f4:b3:0a:d9:d9:21:cd:88:
3f:39:d3:5b:22:86:69:4b:65:f6:8f:32:7d:bc:6a:
7c:a9:23:15:0d:78:29:42:8c:0a:74:a1:4d:cd:d1:
40:66:2a:b0:26:36:4f:f4:98:f2:f5:a5:f8:54:63:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:42:B5:07:80:DB:92:57:2D:C5:36:28:59:BF:E1:C8:14:81:84
X509v3 Authority Key Identifier:
keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/CA67185A02E511EF8ED1355CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.18.0/23
IPv6:
2001:df3:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
68:89:cd:6e:0f:b9:ca:29:7c:c0:d4:99:67:91:34:cb:23:83:
17:dd:3a:38:92:67:61:0b:9a:71:cb:5d:ab:0b:f4:29:cd:58:
b3:c0:8a:02:b8:f3:6a:e5:9a:50:f9:42:8e:a1:49:fe:e2:da:
89:29:78:f2:6a:0f:e1:f2:cd:50:01:fe:fa:5a:7e:d0:b5:87:
bd:8a:06:9c:11:44:e4:31:db:03:ee:ad:68:59:51:6d:4a:1e:
1e:09:d0:79:73:f3:8d:c9:7b:8d:91:3b:9f:01:69:f5:59:8f:
5c:41:20:e5:48:79:be:a3:76:51:71:f0:77:e7:ae:4a:94:e7:
c3:89:a1:05:c0:28:49:88:90:f2:9a:b7:c3:00:98:40:9a:d0:
1d:37:6f:2a:81:e4:98:2a:9f:54:ff:87:9c:28:60:40:8b:ef:
c8:ec:f3:9f:5a:a0:00:03:23:64:3b:e9:7a:3c:4d:ee:83:08:
bc:52:78:7a:1e:4b:11:ed:c7:d9:33:3a:38:37:e9:80:02:ab:
a8:21:dd:bc:7c:2e:3e:a0:da:d0:e2:a9:72:89:80:a5:82:f4:
7e:96:24:7f:9b:87:c4:79:d8:0c:5f:46:d1:80:0b:d3:7a:56:
bb:c3:a2:e9:94:a8:97:e3:ad:51:f8:e3:1f:40:c2:7f:8f:32:
d3:52:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:57:27 2025 by rpki-client