Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
File: 0D5CF6FE10E111EEB6B51328C4F9AE02.roa (raw, json)
Hash identifier: UPToINdM1t6iBYcKt2AtwVEd8vBXObA2OIdbDngeqJc=
Subject key identifier: CB:B5:75:2A:68:AF:C6:91:5E:DF:FC:9B:7D:52:98:0E:0C:CD:A2:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
Signing time: Thu 30 May 2024 16:03:34 +0000
ROA not before: Thu 30 May 2024 16:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135792
IP address blocks: 103.81.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35474 (0x8a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a356-c088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:cf:d1:50:2c:a7:05:76:a5:05:e4:fd:4e:
6d:0a:bb:d0:3e:2f:87:cf:9d:7a:c1:eb:45:19:1b:
f3:b9:35:c0:4d:e2:58:15:2d:ba:4d:e2:47:ea:bf:
b8:8d:8c:69:7f:8c:6f:a5:c6:75:5e:0e:65:21:3d:
79:4c:ba:e7:a7:6f:99:85:be:59:5a:1b:ee:e6:e7:
9b:18:26:17:a1:b5:9f:3c:f0:ab:8d:78:10:a2:f4:
ca:79:f6:36:97:bb:0c:8c:a7:e9:21:85:df:b4:90:
9e:f2:b2:30:e4:d1:dc:80:e7:ff:6d:7b:15:ab:15:
3d:9c:89:81:40:26:ad:ad:29:4f:3e:d8:f0:dd:70:
5f:b1:7b:86:76:5f:76:a1:c0:78:d9:00:c8:2e:fb:
b4:db:cf:6d:df:8d:cd:89:83:db:a0:44:53:54:e1:
e5:50:69:d5:1c:e1:3b:a9:b6:24:84:e2:f4:3d:57:
f1:b8:23:24:d8:f0:c6:16:3e:e3:dd:4b:75:b7:88:
a7:ec:47:3b:ef:33:31:b9:57:d7:c8:62:44:7e:f4:
01:3b:ad:06:f3:78:0f:d7:51:cf:fc:9e:cd:f9:09:
82:89:7e:1d:ff:9f:7b:be:e7:1f:80:07:a2:86:6b:
a8:b8:e1:c0:12:f5:65:39:8e:58:05:44:77:f8:ba:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:75:2A:68:AF:C6:91:5E:DF:FC:9B:7D:52:98:0E:0C:CD:A2:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:70:7d:8a:28:4b:7e:d4:b1:b9:48:29:0d:48:63:e1:60:cb:
89:46:15:40:75:6e:b2:6b:d2:33:8c:a6:4b:6a:33:99:dd:a3:
59:60:6a:25:ba:66:b6:48:82:e1:e7:3a:85:d2:15:08:8c:d3:
f5:8b:97:fd:60:eb:d3:48:be:af:3d:1b:dc:41:4a:57:62:22:
b0:39:13:ed:a3:9f:46:19:49:9e:26:e1:0a:bd:5f:db:76:88:
2f:70:79:b9:48:d5:68:20:89:4e:6d:cd:d6:bd:3b:8f:97:73:
86:18:40:52:fc:69:eb:ad:d6:d3:0b:db:3d:41:34:e1:b7:8f:
ec:68:ce:bb:84:07:06:37:05:14:18:10:38:f0:fe:bf:c7:5a:
7a:9e:fc:6b:06:83:6b:d2:ea:9a:b7:c6:71:25:a0:be:9d:25:
06:cb:4f:0b:a6:93:3b:de:67:14:e8:76:d9:f7:d8:d7:94:72:
a7:6f:71:5d:82:ac:d2:25:61:f1:4d:ef:e2:e7:c7:26:84:18:
ad:b1:06:60:3e:7f:4f:67:c4:b1:e1:e5:97:b8:f9:39:70:2e:
4b:82:52:7c:45:c0:21:7a:fb:43:37:4e:8c:bd:47:95:87:22:
67:6f:e7:68:d2:38:68:d6:6b:47:fc:8e:a9:60:1a:24:ba:c5:
9a:61:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:26 2025 by rpki-client