Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
File: 0584C194E8FF11EAA215666CC4F9AE02.roa (raw, json)
Hash identifier: FbhO4aN/D9LKsT1LwKC79ncyPqBMohsHybqslAsw8n8=
Subject key identifier: 67:55:7F:AB:6C:86:FE:38:9C:17:F4:C0:65:16:E5:D4:F0:3D:F6:46
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89FA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:01:04 +0000
ROA not before: Thu 30 May 2024 16:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134943
IP address blocks: 103.141.115.0/24 maxlen: 24
103.204.184.0/24 maxlen: 24
103.204.185.0/24 maxlen: 24
103.204.186.0/24 maxlen: 24
103.204.187.0/24 maxlen: 24
2404:13c0:1111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35322 (0x89fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2c0-3d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:42:1d:31:e9:e5:dc:e4:37:99:97:07:5a:
ab:43:35:e6:0e:28:49:f3:df:59:2e:14:91:eb:df:
90:99:30:94:17:58:87:1a:07:e3:c2:26:70:9c:8c:
4a:eb:77:dd:c4:4a:65:90:95:2f:fa:d1:cb:3c:35:
cb:93:43:62:d8:3c:a5:2b:56:7a:c9:d9:43:d1:1e:
9a:1d:f4:c7:73:cb:8d:75:c3:cb:9a:45:43:37:eb:
7f:87:81:a4:1a:82:67:e7:db:01:10:5d:87:5f:f5:
31:07:4f:e7:01:4a:d0:ec:61:89:c0:f6:20:1a:55:
7b:bb:71:4b:f5:d2:75:99:47:4b:3f:01:d1:8a:40:
bb:35:9c:1e:2f:98:c0:da:77:e8:88:c0:fa:71:d9:
c8:15:f4:3e:59:57:7e:f7:6e:96:a8:54:39:57:b1:
09:db:ce:0e:32:09:8f:ee:e9:a2:fe:00:98:1d:75:
bf:76:0c:ed:64:42:e7:39:f9:db:eb:08:5d:34:93:
8f:f0:ee:cc:40:26:15:cc:04:34:9a:43:75:20:80:
8c:89:f3:2d:45:60:c9:08:9d:ce:fc:5b:5c:dc:54:
c9:99:7d:b6:fd:f4:c4:7c:8b:7a:d2:17:55:f4:25:
3d:eb:e2:f4:23:b8:e8:e0:c3:ce:53:28:6d:94:f4:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:7F:AB:6C:86:FE:38:9C:17:F4:C0:65:16:E5:D4:F0:3D:F6:46
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0584C194E8FF11EAA215666CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.115.0/24
103.204.184.0/22
IPv6:
2404:13c0:1111::/48
Signature Algorithm: sha256WithRSAEncryption
b1:00:94:96:c7:d0:73:27:98:ce:22:e0:78:8e:72:ff:00:cd:
37:31:b4:7e:15:36:85:51:6e:d1:f9:f9:1e:01:5b:15:9f:e2:
c0:26:33:41:16:17:e9:b8:fe:73:5b:bd:63:ed:0e:e4:49:45:
72:1a:0c:99:47:fa:aa:ec:0a:87:69:fb:27:28:ef:90:2d:be:
90:f4:7c:4a:27:8d:9c:77:6a:a5:18:34:b8:fa:9f:1f:de:00:
1c:51:83:c6:ea:f2:cd:50:1b:da:1b:58:56:93:b0:85:3c:ea:
0c:3c:57:92:36:df:e9:ad:2a:b5:61:bd:90:8f:76:3e:62:f6:
c4:2e:72:94:53:b4:ce:07:0b:3d:ea:d0:e6:97:68:ed:1a:1d:
cd:bb:ff:1b:31:9c:3f:2b:01:a7:a1:36:32:10:df:60:72:00:
b5:8a:ec:83:79:be:87:a0:0e:f4:a8:5d:a5:d8:75:8b:be:bf:
8f:e6:31:6c:77:cf:55:58:c8:ca:82:06:13:2b:f9:79:ab:0d:
9d:51:eb:c3:9e:63:b4:64:d7:cf:5a:52:7e:f1:94:60:11:96:
7e:f5:01:3c:10:4f:be:68:79:8b:21:34:f2:f4:40:d2:fb:27:
9a:e4:16:1d:55:02:34:c6:8e:ef:04:8d:92:eb:6a:9f:66:f6:
51:1e:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:52 2025 by rpki-client