Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20E2D250BDCB11EA8AB8267EC4F9AE02.roa
File: 20E2D250BDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier: jeXp20TkIiKqzdbFLU0oYf//nZOkR2a5FL96/atUlL8=
Subject key identifier: 9E:20:8E:8E:07:69:56:A6:F8:D7:07:42:BD:40:6A:B8:35:32:D8:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B9F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20E2D250BDCB11EA8AB8267EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:07:58 +0000
ROA not before: Thu 30 May 2024 16:07:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137176
IP address blocks: 103.110.222.0/24 maxlen: 24
103.113.150.0/23 maxlen: 24
2001:df4:7700::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35743 (0x8b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:07:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a45e-cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:21:f6:6c:e9:30:28:d7:34:b9:34:37:8a:
ba:8c:49:f6:43:2f:57:bc:e3:cf:b7:e0:4d:fb:e3:
c5:97:01:0d:d4:4b:cb:19:f0:6b:44:55:d8:c7:bc:
a8:84:60:f5:f0:c2:41:e1:14:c2:e7:ab:fb:69:d0:
56:0b:65:49:3c:49:09:4b:ea:1d:36:5f:49:05:80:
78:da:42:89:33:96:67:c6:3d:22:fe:37:a7:8f:20:
b6:ea:21:cf:3f:d9:6f:7d:21:f1:43:bb:68:e0:67:
54:b7:13:b7:0c:84:f2:34:eb:80:16:89:f9:cd:e5:
64:b2:4b:a3:84:4a:38:89:54:f2:01:00:19:66:af:
e0:1d:49:ab:37:83:55:d7:8b:b7:85:3b:ce:93:09:
45:cd:fc:a0:c4:39:e8:b2:f7:31:cf:36:25:9a:25:
81:ce:6d:cc:c6:60:f5:82:16:03:37:5e:e7:f5:df:
fb:8a:91:11:fb:b6:0d:f5:b2:2a:ef:8c:b9:14:bb:
9d:7e:e0:53:74:f4:13:28:6b:93:b0:9d:7e:15:76:
1c:53:5f:b4:d7:0e:f6:af:23:de:f7:95:58:de:30:
4b:63:c2:e0:fa:a8:5d:e8:85:86:dc:f0:8c:20:45:
44:d7:05:68:cb:fd:81:d1:f3:14:07:d3:4f:10:c3:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:8E:8E:07:69:56:A6:F8:D7:07:42:BD:40:6A:B8:35:32:D8:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20E2D250BDCB11EA8AB8267EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.222.0/24
103.113.150.0/23
IPv6:
2001:df4:7700::/46
Signature Algorithm: sha256WithRSAEncryption
2a:c9:b2:d5:d3:fe:9c:07:4c:e7:3b:99:51:f5:de:d6:da:06:
3d:8d:58:95:47:6b:96:3e:3f:47:0f:ce:7b:0d:73:31:47:e1:
d1:5a:41:a6:3f:af:7a:0a:47:bf:d2:1b:6a:27:b5:66:83:9d:
f1:c0:2b:86:aa:be:8a:0d:d4:90:15:e4:fe:a3:00:68:6c:4f:
a4:9d:2c:1b:69:ff:9e:2e:08:f2:13:c4:b5:e3:a1:1e:7d:7a:
9a:2f:82:6b:69:34:dd:fd:21:45:c3:aa:3d:58:57:11:d1:03:
68:19:21:41:00:84:36:20:8b:96:58:94:96:68:52:5f:e2:b3:
49:7a:3a:76:48:46:fb:f1:3d:ae:a5:dc:33:65:a4:24:89:7b:
32:0e:26:4c:01:a3:3a:40:1e:86:99:13:53:97:4a:53:48:0a:
5f:29:66:b2:fc:e3:63:fb:6e:64:3d:93:e4:9f:13:7f:4d:30:
78:b9:b0:aa:f8:5a:0a:b4:b1:cb:3c:71:00:0a:78:6b:92:fa:
c4:35:e1:4e:2c:18:e8:ee:99:28:9b:89:86:25:78:6e:39:6c:
d8:e1:3e:d1:5b:27:b8:d9:17:ed:b0:da:5c:7c:7a:a9:ea:1c:
85:26:14:af:5d:6d:ae:a4:d6:11:03:bf:5d:32:f3:c6:8f:c0:
0b:8d:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:57 2025 by rpki-client