Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
File: 12869E78746511EDBE898845C4F9AE02.roa (raw, json)
Hash identifier: f9r/+okqMO1STGibOA6tEMkx0r8O6FJEFoz7ZXHZrzY=
Subject key identifier: F4:E1:30:79:B5:41:9C:2E:21:74:61:60:D9:4C:18:72:24:A6:0C:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A47
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:19 +0000
ROA not before: Thu 30 May 2024 16:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135687
IP address blocks: 103.127.130.0/24 maxlen: 24
103.174.243.0/24 maxlen: 24
103.176.16.0/24 maxlen: 24
103.176.17.0/24 maxlen: 24
2001:df7:4c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35399 (0x8a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a30b-ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:ac:4b:41:d0:30:19:72:0a:51:28:03:d7:
5b:bc:5e:db:c5:a0:b0:ec:b2:f8:e7:5a:88:81:50:
ab:77:37:71:0e:d3:c8:d1:c3:bc:6b:85:0e:91:ca:
af:74:0f:00:d3:f5:f7:ce:e7:f0:a4:d2:f1:67:29:
71:a9:77:d3:3d:98:db:4f:e7:4b:7d:11:29:7a:fb:
6b:cd:6d:4f:fc:a6:64:46:0b:9b:eb:5d:68:62:c3:
1a:77:5d:21:33:87:c2:89:8b:d7:88:18:80:39:db:
50:59:4a:72:3d:95:fe:ea:55:32:75:7e:86:e8:f6:
3f:bc:94:f6:90:08:fe:36:99:5d:36:72:ab:2a:14:
03:95:e6:6e:b7:1b:22:29:9b:c8:d7:9d:e5:1d:bc:
a4:74:06:ca:1b:43:ce:90:2c:19:0c:d1:cd:a8:b8:
08:ed:31:9a:36:e1:7c:d8:58:76:80:58:ba:28:22:
16:95:f1:6b:f8:eb:4c:3f:22:12:8a:00:86:07:76:
53:93:c1:6d:4b:17:73:d3:65:32:fe:85:09:a4:92:
f5:71:63:54:7a:7e:71:03:ce:ca:26:9d:0a:6e:df:
ba:05:e8:52:f8:6b:51:21:4d:c3:e8:1f:2e:f6:75:
db:d3:e2:66:82:ed:a0:45:7d:9d:95:5a:b4:9c:ac:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:30:79:B5:41:9C:2E:21:74:61:60:D9:4C:18:72:24:A6:0C:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12869E78746511EDBE898845C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.130.0/24
103.174.243.0/24
103.176.16.0/23
IPv6:
2001:df7:4c80::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ae:2f:05:4a:9f:50:f8:61:0c:a5:12:f6:0f:f1:75:5e:9a:
4e:ea:36:32:6a:62:87:89:d4:bd:fc:50:a7:f1:08:4e:3e:b2:
28:8e:7a:cf:62:09:12:ef:eb:47:3c:ee:88:5f:69:df:15:dc:
b3:4a:b1:3b:01:5a:d3:e2:c7:4b:b9:a6:9c:7c:91:df:58:d1:
91:7f:0e:6b:e8:2e:4e:1f:95:ee:fb:df:c8:e3:92:84:b4:ba:
50:e0:c1:a4:aa:41:05:f7:26:bf:64:4a:a5:1e:f5:4e:7f:ce:
a6:90:b9:7c:52:59:06:1c:3a:e8:3b:df:88:ec:34:3c:e3:0b:
c7:37:68:70:cc:7f:a8:2f:f6:29:f1:b5:1f:07:6f:da:ee:40:
10:24:f2:fc:05:26:5a:75:c6:f3:ce:ed:d3:cd:49:f1:42:8a:
fa:36:5b:6d:42:c2:0c:99:c3:28:2d:be:ad:42:38:c5:04:44:
9c:df:44:4a:1d:4d:6f:a2:59:2a:75:49:2a:47:1f:99:7a:97:
3e:73:ef:50:ac:db:dd:85:da:c6:eb:57:6f:a9:4f:e3:73:33:
8d:f8:b9:9e:95:f4:9b:e0:1a:8a:bc:ab:2c:8e:51:b4:2a:74:
c6:fb:e9:52:8d:2d:b4:c3:b0:4f:49:7a:38:d9:cc:98:c6:71:
3f:e6:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:46 2025 by rpki-client