Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa
File: 1E89D01ADF9711EF9A6E2E29C4F9AE02.roa (raw, json)
Hash identifier: dAap7wJOIwCDknDQLQSfZneK7oKUC9ltpTMJdWsQIsk=
Subject key identifier: 13:52:C9:EA:BD:DD:C9:8D:B0:CD:3E:02:1C:A5:CD:59:4C:DB:9B:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A44A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa
Signing time: Fri 31 Jan 2025 05:49:22 +0000
ROA not before: Fri 31 Jan 2025 05:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134936
IP address blocks: 103.206.176.0/23 maxlen: 24
103.206.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42058 (0xa44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 31 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679c6461-bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:6f:ce:7a:49:72:4d:8b:75:07:6f:ce:bc:
e1:b9:4f:61:ee:32:de:4d:f6:38:73:92:4f:41:0d:
1e:b4:7a:c3:3a:09:b0:b7:b0:c9:8b:94:7b:0f:df:
82:e2:95:19:d3:af:8b:5a:36:07:25:41:5c:43:fd:
ed:e6:49:cc:cd:60:bd:cc:a6:a3:38:38:e6:56:49:
35:b7:24:e2:b9:59:bf:30:82:88:fe:63:af:7c:fa:
19:d1:6d:b1:78:79:d1:51:36:99:19:bc:92:3e:97:
d5:de:65:71:8d:55:a1:d3:e6:a8:8e:b8:7d:82:f0:
37:98:e1:d0:24:04:3f:62:4f:59:0c:7f:86:30:f0:
b4:d6:66:8b:3c:de:2c:5d:d0:e7:7a:e5:34:65:a0:
ea:b3:15:1b:cf:cc:a9:2e:6e:2f:65:b2:56:7e:cf:
f8:9d:80:38:e6:ce:ea:2a:1f:17:d9:7a:33:ab:5c:
58:57:20:3b:0a:a0:a3:fe:35:d4:15:e2:df:1f:15:
ba:60:62:15:12:f8:eb:47:db:7e:00:b6:67:3b:d6:
21:4d:30:3d:7f:3c:b3:28:db:a4:cb:f1:73:90:bb:
ae:a4:28:c5:ec:c8:e9:22:f4:58:84:ff:c4:f8:4d:
32:1e:69:ea:d1:04:4e:1d:71:cc:66:d9:7e:40:10:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:C9:EA:BD:DD:C9:8D:B0:CD:3E:02:1C:A5:CD:59:4C:DB:9B:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.206.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:21:79:54:78:b3:a8:81:c7:fe:c6:a1:a1:9e:f4:1e:cb:83:
f5:e5:79:4e:98:c0:b5:78:2b:ad:78:8f:c3:3a:64:ac:3f:c5:
ab:b1:06:d5:c0:0e:22:7f:30:72:5a:ee:09:d7:56:df:92:d7:
f9:22:a1:3a:28:b2:79:15:27:db:cd:c7:c7:0d:0d:83:49:39:
4e:4b:d6:95:54:3e:d9:2f:66:ae:0f:f9:c0:18:89:ec:c3:aa:
ba:20:82:85:6c:54:4a:3e:2a:e5:ab:be:48:14:78:08:ee:d9:
cf:8d:2f:90:91:01:61:bb:95:35:6d:44:5c:61:47:34:ff:ce:
ae:e1:80:e9:68:7c:95:c6:17:ea:9b:d9:c4:33:e9:ec:7b:ac:
50:c6:69:1f:3a:81:84:46:d6:e7:46:b5:b2:9c:28:86:6f:cb:
c0:13:26:38:e7:6b:57:5a:2b:ee:f8:1f:84:4d:da:3c:4d:f4:
35:d8:56:b1:2b:56:a8:b4:b9:b8:cc:e0:2c:18:e7:f5:3a:1a:
f8:5a:ac:d1:f9:b3:32:4f:f0:de:d2:f5:a7:6b:ef:b2:3a:c7:
4f:b9:18:c6:9b:c1:3b:0e:19:23:bb:07:86:79:b8:fe:41:f9:
01:2d:aa:62:0b:a8:7f:43:1e:37:12:e5:00:63:2b:f1:5d:ef:
6b:3b:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:14 2025 by rpki-client