Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
File: 30F88C40861011EFA93BE439C4F9AE02.roa (raw, json)
Hash identifier: YueIwKP3pbWr+gu9EzhFuQLPkTAp2BIZUYZ745mr/UA=
Subject key identifier: 00:DF:D9:A9:3A:55:DF:A8:B5:DF:7B:54:A0:EF:45:3D:96:AF:91:90
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9B6C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
Signing time: Wed 09 Oct 2024 07:29:17 +0000
ROA not before: Wed 09 Oct 2024 07:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141559
IP address blocks: 103.163.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39788 (0x9b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 9 07:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=670630cd-6556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:d2:b6:77:38:b9:aa:bb:ff:ed:a4:c6:be:
0b:21:a1:ff:a8:73:8c:7d:43:df:83:8c:ed:75:0c:
fc:4b:00:df:8b:0c:70:45:3b:8f:46:7b:67:b3:eb:
d0:17:de:8e:5c:f9:87:c1:6d:dc:21:61:ec:66:39:
33:6b:15:01:25:6a:b6:00:24:9b:40:3a:80:b8:42:
11:60:59:67:ba:0c:6f:46:e9:37:ff:4d:03:89:94:
d9:d5:73:8d:53:1f:f4:59:c4:f2:5f:1b:04:7d:a1:
62:fa:54:b7:65:8a:9a:13:30:3b:f9:75:48:45:a0:
0c:68:3a:53:b9:57:f7:40:6d:33:5d:40:37:76:65:
04:34:65:bf:90:0a:35:c9:ae:bd:25:03:e4:83:06:
9b:24:25:12:ce:82:2e:27:4d:b9:bf:3e:a7:2f:b5:
58:28:ad:19:fb:32:26:a4:62:ad:02:1c:56:b8:69:
46:21:b2:87:fc:e8:b2:0e:25:9c:3a:56:e7:1f:49:
38:c0:f9:54:ab:a4:29:8a:57:9b:47:5d:ca:d2:d6:
be:41:d3:b6:9c:51:d7:8e:bd:54:a3:5a:6b:46:33:
94:5f:d7:37:2c:a4:09:ec:ad:2d:2e:a5:18:af:aa:
31:d2:5a:c8:b0:27:3d:7b:07:e8:cb:db:52:98:80:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:D9:A9:3A:55:DF:A8:B5:DF:7B:54:A0:EF:45:3D:96:AF:91:90
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30F88C40861011EFA93BE439C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.196.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:0f:11:d2:74:3f:ac:53:f3:28:9d:72:1d:75:5a:b6:9b:07:
fd:b6:f8:41:95:2f:03:76:1e:0e:e4:8c:e6:36:84:6e:11:bc:
59:f6:b8:8c:af:4c:eb:a6:b8:d1:56:36:7b:94:df:52:2d:b8:
1b:ab:13:89:56:66:22:e7:62:0a:0f:51:7b:6d:07:7c:6c:26:
a7:3b:49:18:64:e7:49:83:f8:67:60:c3:04:89:39:43:e0:e6:
fa:5a:70:b3:04:a6:7f:60:c1:4e:7d:0a:7a:0b:73:dc:a2:1d:
a1:f8:fd:df:5a:37:ee:75:6b:de:8d:38:01:a6:17:91:da:19:
21:57:11:00:b3:64:7e:52:4b:1e:22:83:1c:14:dd:e0:c3:6a:
1f:07:13:0e:ce:31:18:fd:cf:32:26:04:98:7f:30:56:73:da:
87:42:85:a5:e1:ae:ca:65:ff:ad:17:76:b0:01:a2:88:88:82:
8a:b5:07:f8:40:35:48:79:79:76:26:6f:87:d3:38:bf:80:f2:
4a:20:59:93:2d:32:a1:15:35:54:d2:ee:2b:2c:91:60:ec:1d:
8f:53:3c:14:4f:f7:5d:af:c8:f9:dc:3d:5d:ae:f3:59:5f:4e:
ba:dc:13:cc:d1:7d:21:91:7c:31:7d:d4:96:fe:af:ad:59:08:
aa:9a:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:08 2025 by rpki-client