Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E94F818FDD611ECA42A1D3AC4F9AE02.roa
File: 2E94F818FDD611ECA42A1D3AC4F9AE02.roa (raw, json)
Hash identifier: OPP5zGzuD6lpgjys4mv67cvaVZyZ+unQFfQNVNDlwm4=
Subject key identifier: CE:A2:5E:7D:CC:33:D1:0B:2C:AC:09:D6:77:FB:59:78:EE:40:D3:FA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8914
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E94F818FDD611ECA42A1D3AC4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:21 +0000
ROA not before: Thu 30 May 2024 15:57:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133683
IP address blocks: 103.35.164.0/23 maxlen: 24
103.48.50.0/23 maxlen: 24
202.66.172.0/22 maxlen: 22
202.66.172.0/24 maxlen: 24
202.66.173.0/24 maxlen: 24
202.66.174.0/24 maxlen: 24
202.66.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35092 (0x8914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:57:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1e0-6b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:99:78:89:1a:80:1e:98:84:0c:63:9c:d5:
9b:d7:61:95:07:9f:f8:cb:c0:49:05:c2:cd:fb:55:
6c:2f:ec:3b:61:63:52:01:04:b1:5e:a5:52:bd:94:
44:4d:eb:66:03:1b:3a:5f:72:b8:a7:84:03:25:1e:
8c:1d:ce:d9:59:0f:36:4e:bf:e5:53:a1:47:80:5a:
51:60:e7:e4:9e:05:74:58:15:d7:78:86:4e:61:c1:
6f:8d:89:cb:47:f4:3e:0a:28:b3:c9:ad:db:0e:a1:
05:81:17:8c:ed:7b:91:26:19:0b:3b:36:4a:b3:b3:
ac:30:43:20:89:d2:65:4f:0c:ea:d8:94:6e:a5:41:
68:e5:46:e1:4a:f5:f1:a9:5e:0c:be:88:5a:8d:1b:
31:98:d0:99:71:ab:44:bb:e9:e0:01:e0:2b:ee:aa:
de:d1:c6:45:85:df:96:f3:98:d8:4b:55:f8:2c:23:
4c:65:9b:b9:cc:d1:8e:6e:a1:1d:d2:2e:25:51:44:
c2:0a:b0:8e:54:57:b0:1b:88:da:e6:8f:86:59:0f:
b9:c4:9b:7c:1f:85:38:22:db:32:5d:37:34:80:88:
db:42:80:44:87:35:e4:f9:dd:c7:8d:9d:40:b7:92:
41:7f:95:bd:b2:2c:d2:6b:7d:99:20:1a:c5:0b:53:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:5E:7D:CC:33:D1:0B:2C:AC:09:D6:77:FB:59:78:EE:40:D3:FA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E94F818FDD611ECA42A1D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.164.0/23
103.48.50.0/23
202.66.172.0/22
Signature Algorithm: sha256WithRSAEncryption
55:55:30:db:3d:34:9a:86:a8:5b:33:f0:2a:21:5e:ce:89:87:
99:c6:ea:db:97:7a:e4:29:f9:af:35:22:1c:78:e3:95:a9:d1:
87:5d:ee:7c:1d:d9:ac:12:95:78:3d:2a:fb:77:a4:dd:28:6c:
68:38:60:31:ca:d2:43:ba:a4:a4:8c:6c:0a:c0:d4:cc:10:d3:
33:20:aa:27:5d:9e:a3:86:f2:7b:79:1d:86:a9:2d:65:b7:6c:
1e:0e:af:79:8e:f9:19:9c:c1:3b:2e:98:8d:b1:72:26:7c:3c:
2d:fb:4c:22:e1:23:48:18:50:0a:0a:e4:3c:14:5a:32:e8:6f:
a6:84:21:28:bd:ba:73:65:1f:fe:11:8e:48:2c:62:30:c3:a0:
9e:fe:6e:7c:fe:7e:5b:70:ae:76:8b:1a:a7:18:d5:7c:a0:07:
69:27:92:f6:3f:e3:0c:29:60:f4:96:05:bd:79:dd:bf:cd:06:
e2:35:27:01:41:8c:e1:01:2a:85:81:f5:13:7f:14:d3:78:b8:
46:9d:27:e4:97:ab:73:df:4f:66:e2:be:07:2c:49:cd:45:9c:
42:3d:36:d3:eb:9f:2d:5b:7e:a7:50:45:9a:0e:66:af:13:79:
3e:be:d6:44:7a:e6:c5:25:dd:8f:8c:e3:83:c4:5c:87:5c:6b:
86:84:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:25 2025 by rpki-client