Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0813D1E4FF3011EDAD61391CC4F9AE02.roa
File: 0813D1E4FF3011EDAD61391CC4F9AE02.roa (raw, json)
Hash identifier: l8Y/nAaKF//OnHqpXVDEd67lb9d7tsixWwsuawU5lhc=
Subject key identifier: F4:37:18:C6:90:41:9C:9A:34:08:C3:CC:7F:2D:D3:0A:7D:AC:BA:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 910E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0813D1E4FF3011EDAD61391CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:30:34 +0000
ROA not before: Thu 30 May 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56209
IP address blocks: 103.60.208.0/22 maxlen: 24
103.111.232.0/22 maxlen: 24
103.178.46.0/23 maxlen: 24
103.181.34.0/23 maxlen: 24
103.181.126.0/23 maxlen: 24
103.210.36.0/24 maxlen: 24
103.210.37.0/24 maxlen: 24
103.210.38.0/24 maxlen: 24
103.210.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37134 (0x910e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a9aa-c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:45:42:1e:77:42:c2:2b:c6:36:47:9c:76:
89:c3:76:bb:86:5c:72:74:19:13:6f:75:7e:34:2c:
82:17:fb:7b:86:cc:43:4c:f6:f8:9f:7d:2c:47:a8:
09:36:da:a2:92:59:80:0a:18:5b:04:2b:28:34:fd:
7d:f0:a3:a5:24:21:34:97:c2:9b:ad:eb:01:d3:00:
d8:20:f7:00:46:56:b7:a4:2c:66:2d:91:95:04:c9:
74:ab:09:c9:33:f9:2a:2d:e1:3c:f7:4e:f4:6a:ea:
9c:e5:ae:dc:ee:41:8e:58:6c:52:86:e0:46:5f:e2:
65:48:7a:df:39:d7:f2:f9:37:c0:d5:6f:98:30:42:
db:03:39:f6:03:77:24:49:c5:f8:46:c1:ac:6a:92:
3d:e6:cb:2d:4f:98:eb:aa:aa:cb:2b:98:f3:31:ec:
1c:26:6c:fa:3a:d0:2a:20:40:d3:dc:0a:b2:e0:f3:
7a:42:05:d8:a0:b2:4a:2b:80:e2:14:29:1a:ec:b0:
51:35:b6:0f:10:fe:e2:04:f7:e8:9b:15:2e:22:9c:
55:07:3a:f4:78:d2:e1:87:33:d9:b6:ea:2c:6b:15:
58:07:ef:5a:f5:45:35:4d:68:ac:8b:7d:91:8d:df:
44:f1:f0:1f:e5:cd:30:e2:ee:78:ca:79:e6:04:bb:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:18:C6:90:41:9C:9A:34:08:C3:CC:7F:2D:D3:0A:7D:AC:BA:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0813D1E4FF3011EDAD61391CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.208.0/22
103.111.232.0/22
103.178.46.0/23
103.181.34.0/23
103.181.126.0/23
103.210.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:7e:1a:dc:1d:54:c1:1e:55:aa:de:0c:ba:cf:71:bf:81:00:
ca:b0:25:84:64:f8:e4:46:e2:44:c4:00:6a:58:2a:01:29:50:
ec:7b:be:da:8c:b7:29:03:0c:80:16:93:18:19:b9:67:d0:c5:
01:54:23:46:04:58:c3:7e:4d:96:08:cd:5b:16:e7:45:68:f1:
95:01:be:f0:78:6b:53:16:06:50:c9:91:12:a0:ea:03:9d:36:
31:2f:de:37:21:65:a2:07:d2:b2:f1:ea:e6:42:b1:44:7d:e2:
e1:e0:82:b8:e2:cb:90:35:9e:20:28:e5:de:a4:a7:43:8d:25:
1f:ca:5d:1f:c2:aa:14:a6:d8:07:80:02:34:da:dd:84:7a:1f:
dc:e7:87:7c:f6:d1:e7:5b:a0:04:3b:72:53:68:97:00:3d:7f:
dd:20:cd:d8:e0:30:5e:e5:f2:e5:84:5a:10:7e:16:86:01:8a:
1f:42:0a:50:5a:77:7e:51:27:05:f9:42:1d:02:9b:af:60:6c:
04:8c:6c:4b:bb:a2:83:00:d9:6b:71:f5:5e:90:c4:09:1a:63:
0f:78:7f:2b:24:21:e2:6c:70:fb:1c:46:8b:17:08:5f:e2:65:
e7:fe:da:a0:62:5c:a4:f0:92:7b:98:ca:94:cc:f8:9f:ca:6e:
5d:4e:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:04 2025 by rpki-client