Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
File: 2663C7EA402011EEB5DD5049C4F9AE02.roa (raw, json)
Hash identifier: 2Xnsl8qDBvNXExS082tGn5m9fwNWG7KWSTHOMQaMWfw=
Subject key identifier: 01:7F:FE:D3:5E:B4:53:DB:3E:D7:CD:23:29:A2:29:41:37:1A:4C:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
Signing time: Fri 13 Dec 2024 10:17:32 +0000
ROA not before: Fri 13 Dec 2024 10:17:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133007
IP address blocks: 103.119.196.0/24 maxlen: 24
103.119.198.0/24 maxlen: 24
103.155.210.0/23 maxlen: 24
103.159.239.0/24 maxlen: 24
103.170.148.0/24 maxlen: 24
103.183.90.0/23 maxlen: 24
103.187.248.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40720 (0x9f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 13 10:17:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675c09bc-b85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:6b:99:6e:1c:64:a5:ad:d6:a6:54:dd:8f:
bf:8b:aa:57:e6:13:0a:89:63:c8:26:77:7c:3f:45:
df:8f:08:8a:82:aa:f7:52:69:a1:b4:ed:02:18:b6:
cb:57:91:9b:47:d9:cf:22:9a:56:0f:60:0b:71:ac:
0a:53:e4:98:29:aa:f8:ed:8a:62:13:2e:7b:2d:3b:
c3:8f:73:9b:30:73:50:d8:22:0f:00:b3:a5:1d:bb:
02:c9:f8:53:2e:55:3a:6c:78:3f:e4:57:c0:76:4a:
ee:81:b4:7e:f4:46:ea:c1:8d:0d:c7:fc:c1:38:96:
38:1c:ff:02:3c:13:6e:16:2b:b4:2a:22:63:3c:b9:
0c:c1:e9:2d:09:b2:c1:03:6f:84:d4:14:31:1a:cf:
0d:ee:a2:e8:e6:d7:8d:a0:ee:6d:e7:38:f7:45:12:
5a:36:91:2b:65:2c:ef:55:52:9a:15:86:71:05:89:
b2:f0:9e:49:81:12:60:24:42:19:fd:23:1a:8c:8e:
e1:5b:98:23:47:b9:d7:a1:f1:b6:d7:70:a5:95:1b:
38:fd:1c:08:81:cb:43:22:0e:71:cd:bf:1c:49:4c:
2a:ae:46:f9:a4:2f:12:58:f3:2c:35:26:b0:69:0f:
0c:77:28:2b:1c:35:a3:3e:91:bd:f4:4a:51:85:b1:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:FE:D3:5E:B4:53:DB:3E:D7:CD:23:29:A2:29:41:37:1A:4C:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2663C7EA402011EEB5DD5049C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.196.0/24
103.119.198.0/24
103.155.210.0/23
103.159.239.0/24
103.170.148.0/24
103.183.90.0/23
103.187.248.0/23
103.190.12.0/23
Signature Algorithm: sha256WithRSAEncryption
44:4f:1d:86:e6:db:98:9a:cd:01:58:d8:35:c4:75:0a:47:65:
32:5f:a5:6e:93:22:44:d9:ba:a7:a5:e1:e3:17:f5:97:08:fb:
84:d4:e3:ea:6f:0d:1f:fa:d8:c8:15:47:10:eb:7e:10:70:4e:
42:35:71:0a:e5:8c:9d:66:1c:40:cf:9b:da:3e:d5:cf:d6:8c:
e5:97:af:66:5d:e7:ae:6f:39:36:3c:f6:64:6c:e0:5f:5c:4a:
f0:ce:59:62:7d:2a:4b:f0:a1:2c:92:8f:94:c0:86:2f:06:b1:
06:65:26:e8:7b:47:38:12:f1:2e:ae:f2:52:a1:d9:96:a6:c6:
13:42:eb:2c:9d:8d:f9:59:91:63:ed:bf:36:d5:7e:c6:5d:cd:
cd:99:f3:4e:3c:71:af:f1:9a:de:77:cb:fa:f7:49:4b:d7:49:
14:77:1d:da:6d:95:2e:db:73:95:7b:fa:b7:75:dc:83:b4:cd:
be:79:47:5b:ee:2f:a7:b4:d0:30:1c:61:7d:0a:0c:13:ca:63:
de:ff:65:41:5a:34:5e:d1:3b:e0:fb:f7:d1:8a:8f:da:e4:42:
e2:c1:6e:7a:f9:e7:db:5a:73:09:9b:e2:68:b5:2a:41:52:d9:
ac:09:f9:2f:b3:c7:83:de:41:c6:4e:55:93:1f:6a:9d:b3:40:
84:b6:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:29 2025 by rpki-client