Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa
File: 13E9953002DA11EBBE6C0F19C4F9AE02.roa (raw, json)
Hash identifier: A+Izm47JbtAPi2JO+cSc+STYoEXG0qzcGW3bsyBPLCw=
Subject key identifier: DA:8E:93:E9:7B:61:03:CD:58:48:02:76:47:EF:61:1C:BF:EF:1F:A5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 897C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:01 +0000
ROA not before: Thu 30 May 2024 15:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134259
IP address blocks: 103.61.252.0/22 maxlen: 24
103.174.252.0/23 maxlen: 24
2001:df1:7940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35196 (0x897c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a245-2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:61:f6:90:57:c1:c1:91:6d:eb:7c:d7:19:
96:02:89:93:37:f1:03:9f:fd:7b:1c:d3:c3:ad:fd:
cc:35:39:da:8f:9b:03:40:1d:ee:55:20:c0:7e:40:
40:8d:41:b3:87:1c:5d:f9:ca:b3:06:94:a0:f5:bf:
96:6f:d9:59:ef:4e:7b:e8:aa:95:09:7b:1b:38:8b:
2a:19:92:e4:ff:f1:02:e0:1c:bc:fc:72:c4:79:35:
e6:bd:7f:73:a0:90:b6:8e:d6:aa:36:53:bb:9f:b7:
86:d7:0c:44:ee:df:db:81:7c:5e:8d:f1:2b:81:af:
45:50:0f:00:c9:3d:76:37:8b:06:ce:32:6e:a4:ee:
4f:a2:74:cc:a8:13:7d:6d:8a:a8:4f:d1:f7:e5:1c:
6b:d5:a2:81:81:62:03:d9:a3:18:6c:08:fb:52:6e:
b9:ff:fd:c8:52:7c:85:25:24:5d:eb:98:d3:50:88:
58:66:c3:2d:65:3e:6f:85:eb:1c:58:30:d6:a3:18:
72:6e:94:a8:da:fd:47:75:70:61:a8:fa:b8:67:a2:
78:77:97:e6:b9:8f:9a:d4:c7:56:dc:27:84:4d:ec:
92:ea:ef:d1:b1:e6:83:0e:63:a1:63:79:23:f9:e2:
43:00:59:d4:9b:18:b5:07:0c:51:e3:f6:30:61:32:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:93:E9:7B:61:03:CD:58:48:02:76:47:EF:61:1C:BF:EF:1F:A5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13E9953002DA11EBBE6C0F19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.252.0/22
103.174.252.0/23
IPv6:
2001:df1:7940::/48
Signature Algorithm: sha256WithRSAEncryption
38:fc:00:22:eb:59:3b:97:f9:91:52:eb:0e:03:1e:fa:39:70:
63:64:5b:02:5c:60:5d:61:3b:a3:66:b5:68:48:fc:1c:fb:18:
da:c2:bb:58:0a:34:68:d4:eb:5b:e0:0f:d9:89:39:61:70:ea:
f0:b1:19:0f:69:8b:3c:5b:53:6e:4a:09:5a:22:3c:5b:97:80:
0a:66:40:c1:ae:44:11:dd:5f:63:aa:44:a9:35:ed:90:d3:fa:
aa:90:86:74:bb:bb:ea:58:aa:62:2a:97:3d:10:9c:6f:28:02:
bf:2b:73:5e:2b:08:71:c6:44:16:4d:84:fc:76:6b:57:e1:fc:
86:85:37:91:4e:a9:cc:69:30:34:bd:11:2a:ff:4d:d1:80:e3:
55:67:aa:0a:00:5f:67:2d:6f:f9:a9:25:14:24:ba:36:ea:94:
c3:77:a5:72:34:ae:8e:6c:7a:aa:cb:2b:c7:2c:79:f7:99:3b:
c8:af:d7:3a:07:1a:11:47:94:b6:a4:75:9c:8f:b1:e6:29:03:
62:7c:f1:46:29:6a:0a:43:e1:cb:69:0f:b4:25:67:42:95:50:
c5:ed:84:77:ed:98:86:5d:c3:af:ea:4d:5c:95:71:98:36:33:
12:73:5d:e8:3c:90:ae:d7:e1:4c:2d:81:88:13:79:fd:ad:fd:
3c:fe:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:30 2025 by rpki-client