Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa
File: 034D0ED0C01A11EA99DE2279C4F9AE02.roa (raw, json)
Hash identifier: X50ktI4BAhxO0PdnvitfhHrtNhMqR3Ej3Cw8nsrQ2B4=
Subject key identifier: 42:8E:F8:C5:55:03:ED:8E:C3:5E:6D:5B:B6:3B:26:C1:A8:EF:60:E8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8BBB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa
Signing time: Thu 30 May 2024 16:08:26 +0000
ROA not before: Thu 30 May 2024 16:08:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137622
IP address blocks: 103.118.168.0/22 maxlen: 24
2400:cde0::/32 maxlen: 32
2400:cde0::/48 maxlen: 48
2400:cde0:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35771 (0x8bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:08:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a47a-92a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:8f:0f:43:14:7f:6a:85:99:5c:9e:3a:f8:
66:4e:cc:91:b1:25:78:bf:a8:34:c3:c3:34:38:ab:
ea:e8:1e:13:ad:5a:67:e8:a0:d2:95:55:fc:a0:8a:
2a:c1:34:d7:90:7d:dc:ec:93:a9:11:a4:a5:bb:40:
cc:7d:2c:01:20:03:f2:51:8c:6b:b8:3a:6b:e3:4f:
36:8b:18:ac:42:02:1b:85:82:7c:dc:03:b1:0c:69:
e0:15:64:3e:33:7d:f6:b8:87:1d:d7:dc:c0:b9:6a:
78:11:b3:8c:93:75:e7:a2:a0:3c:bf:1b:7f:dd:6f:
32:dd:2a:9e:7a:eb:ed:f8:c1:40:7a:47:46:7f:45:
33:6f:25:23:cb:a5:9e:d1:92:30:8d:fb:ed:26:a3:
ac:1c:bd:c9:79:fc:0c:71:e6:56:68:bb:2e:1a:16:
f8:00:4d:41:a5:5a:9f:23:36:2c:94:b8:15:82:4c:
3f:e2:8f:24:7b:5e:b4:6c:29:be:68:5f:77:b3:a0:
d0:19:c8:be:c5:db:14:75:6f:94:bd:3e:2b:f0:5a:
0d:b2:64:78:4b:bc:5c:ea:9a:69:8d:14:20:52:00:
b3:9c:1f:db:6f:ce:38:6c:c1:c9:16:0d:43:68:6a:
c6:1e:c8:5d:6c:69:e2:43:1b:5c:d1:9e:3e:3a:c9:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:F8:C5:55:03:ED:8E:C3:5E:6D:5B:B6:3B:26:C1:A8:EF:60:E8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/034D0ED0C01A11EA99DE2279C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.168.0/22
IPv6:
2400:cde0::/32
Signature Algorithm: sha256WithRSAEncryption
06:d5:af:ca:1a:bf:1a:62:ef:c1:98:5e:cb:a4:e1:e1:da:75:
42:d2:ec:1b:00:b4:0c:32:a6:f8:18:42:b6:65:35:46:90:97:
07:4d:a3:5a:c4:e8:e4:5a:60:51:d6:1c:30:08:d1:7c:8d:3d:
2c:da:9c:31:13:92:c7:2e:c4:85:56:56:61:86:d1:fa:c2:e5:
f5:38:60:ce:39:a5:8a:21:ba:22:b7:61:ba:ae:99:5c:61:be:
da:b0:41:f2:d7:a6:c9:32:ea:4b:10:63:62:f9:2a:40:33:ed:
2f:7b:b2:48:17:e1:6a:a2:cc:65:92:01:d8:f2:81:47:a2:6c:
ed:61:13:88:f9:4f:52:17:ed:b3:2b:be:99:3b:c9:db:68:ae:
55:2a:11:1c:98:46:c5:96:89:38:f6:a9:eb:60:96:01:54:10:
6d:f3:76:6e:13:85:48:21:88:ea:e7:44:05:82:02:54:5d:99:
21:79:9e:b5:4a:43:24:f9:b4:45:4b:f2:51:7b:62:57:2a:35:
e7:c1:da:92:8b:13:9f:59:1b:98:7f:60:e5:8c:11:6e:d8:27:
15:c3:3d:7e:d7:df:d1:bd:62:f9:f4:41:31:84:13:de:2f:6f:
de:4d:b0:de:2d:c0:38:4b:a1:db:31:d2:20:de:a3:69:91:3d:
ec:4e:03:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIu7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDgyNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE0N2EtOTJhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtijw9DFH9qhZlcnjr4Zk7MkbEleL+oNMPDNDir6ugeE61aZ+ig0pVV/KCK
KsE015B93OyTqRGkpbtAzH0sASAD8lGMa7g6a+NPNosYrEICG4WCfNwDsQxp4BVk
PjN99riHHdfcwLlqeBGzjJN156KgPL8bf91vMt0qnnrr7fjBQHpHRn9FM28lI8ul
ntGSMI377SajrBy9yXn8DHHmVmi7LhoW+ABNQaVanyM2LJS4FYJMP+KPJHtetGwp
vmhfd7Og0BnIvsXbFHVvlL0+K/BaDbJkeEu8XOqaaY0UIFIAs5wf22/OOGzByRYN
Q2hqxh7IXWxp4kMbXNGePjrJcAMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRCjvjF
VQPtjsNebVu2OybBqO9g6DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAzNEQwRUQw
QzAxQTExRUE5OURFMjI3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCZ3aoMA0EAgACMAcDBQAkAM3gMA0GCSqGSIb3DQEBCwUA
A4IBAQAG1a/KGr8aYu/BmF7LpOHh2nVC0uwbALQMMqb4GEK2ZTVGkJcHTaNaxOjk
WmBR1hwwCNF8jT0s2pwxE5LHLsSFVlZhhtH6wuX1OGDOOaWKIboit2G6rplcYb7a
sEHy16bJMupLEGNi+SpAM+0ve7JIF+FqosxlkgHY8oFHomztYROI+U9SF+2zK76Z
O8nbaK5VKhEcmEbFlok49qnrYJYBVBBt83ZuE4VIIYjq50QFggJUXZkheZ61SkMk
+bRFS/JRe2JXKjXnwdqSixOfWRuYf2DljBFu2CcVwz1+19/RvWL59EExhBPeL2/e
TbDeLcA4S6HbMdIg3qNpkT3sTgNn
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:46 2025 by rpki-client