Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
File: 10BD3660FDAF11ECAC854871C4F9AE02.roa (raw, json)
Hash identifier: Ya5/6mdrBJw/j/qjeynhVS80ZsNd1k5GikyLQTU+WKU=
Subject key identifier: 84:07:B4:24:A2:18:0C:CB:F9:A3:5D:41:BA:3D:F5:D2:BC:E1:A7:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F24
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
Signing time: Thu 30 May 2024 16:22:35 +0000
ROA not before: Thu 30 May 2024 16:22:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149554
IP address blocks: 103.189.48.0/24 maxlen: 24
2400:d920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36644 (0x8f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:22:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a7ca-d6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:0d:83:a5:0e:af:4a:9d:5f:0c:55:80:c9:
45:eb:86:87:cc:24:d5:cd:65:48:34:3d:66:cd:eb:
b5:9d:9d:63:66:50:52:f7:95:3b:7e:a5:0f:16:03:
7b:f8:f4:41:d8:7c:f9:c9:9f:d9:99:fc:d5:1d:68:
1e:e1:13:fe:e5:d6:eb:c8:4a:2d:a8:f2:2e:7b:c5:
ab:a3:06:49:89:c3:71:56:f0:65:4c:49:f3:7e:e4:
04:3f:00:4f:2f:ea:29:a3:37:97:32:f5:e4:53:44:
7a:f4:8a:6d:9c:65:a2:46:86:47:3c:e6:a8:59:f2:
71:db:8e:d7:0e:41:97:dd:b1:51:63:00:85:36:d5:
b5:07:ce:3f:d3:2b:0b:a0:cc:ac:64:8a:ef:c7:e4:
0b:0a:58:31:fc:0b:8d:ad:ce:ce:ac:49:69:39:e0:
f7:6c:7a:19:72:a7:b3:7b:3b:3b:88:22:7a:5b:38:
1c:a2:9d:fe:8c:13:91:63:49:3c:43:54:2b:16:9b:
4d:2f:ed:a4:09:06:0a:9a:f5:7d:85:21:e4:91:91:
de:33:e1:21:fd:ff:ab:45:bc:cc:90:4b:01:e5:28:
b6:47:0f:12:e4:07:79:99:e0:af:ed:7f:1f:55:b5:
cb:9e:f7:31:76:b8:90:34:8e:78:a3:73:ca:ef:88:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:B4:24:A2:18:0C:CB:F9:A3:5D:41:BA:3D:F5:D2:BC:E1:A7:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.48.0/24
IPv6:
2400:d920::/32
Signature Algorithm: sha256WithRSAEncryption
7a:22:40:75:a7:cc:43:c4:77:5e:9a:7e:33:fc:5f:29:de:91:
3f:e7:0a:61:7f:99:90:b2:d3:7d:eb:d0:41:45:ac:17:08:ce:
cf:70:7e:46:42:3a:52:45:2e:e3:94:30:58:b3:1d:7a:6f:42:
02:79:67:61:c6:df:d8:8e:aa:c8:12:3d:b7:32:46:19:fe:2c:
66:91:69:1d:ec:ae:4b:23:78:96:d7:ad:43:d8:33:ae:8d:0c:
9d:39:6c:d0:d5:f1:c8:61:79:93:7d:cc:f7:bf:f0:3a:0a:df:
36:64:d9:40:fe:6f:b2:09:59:74:36:d8:3f:10:d8:b4:af:73:
ec:c6:67:c4:7b:11:67:60:f3:b2:2d:d2:9f:6e:60:62:f6:09:
4c:29:55:60:96:9b:0e:d4:4a:e1:c7:17:8f:60:f6:5f:74:43:
b6:7b:b7:f3:a7:71:a5:32:4d:57:c1:f5:0e:73:61:e7:19:9e:
29:45:3b:be:02:71:4a:22:a3:81:0e:0b:b2:2d:f8:7d:26:70:
26:46:a5:3c:16:9a:f4:dd:cf:ee:c5:11:98:fb:40:01:f2:bf:
1f:5b:dc:56:32:01:11:22:8e:6a:47:43:f7:51:40:a0:bc:59:
0b:02:96:87:53:61:cb:d4:9b:96:6b:a1:0b:df:65:95:70:82:
5e:4a:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:38 2025 by rpki-client