Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa
File: 335C17302CD711ECA528B744C4F9AE02.roa (raw, json)
Hash identifier: psQMR8QED+GENRYDHqS2cGoiQSVAD3UQDSOKqW56zSY=
Subject key identifier: 6C:34:D8:EA:EA:9F:09:09:15:C9:87:7D:33:C5:8B:C1:09:07:91:19
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C53
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:51 +0000
ROA not before: Thu 30 May 2024 16:10:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138771
IP address blocks: 103.71.16.0/22 maxlen: 24
103.139.4.0/23 maxlen: 24
103.179.2.0/23 maxlen: 24
2001:df2:8e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35923 (0x8c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:10:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a50a-c51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:5f:0d:4d:29:b3:e3:af:b9:f0:ec:cc:ca:
48:d3:05:d7:8e:cd:af:f2:a5:11:b4:7d:f3:6d:da:
d8:50:3a:a1:66:3d:f3:ad:df:1c:83:6f:e3:4e:a3:
18:6c:b7:d7:a0:1e:dd:e0:66:bd:62:d5:a6:9c:49:
73:ec:1d:94:62:fe:2e:ae:a8:75:f7:44:ab:1e:57:
c8:47:92:70:dd:87:04:f5:df:4b:30:b8:11:01:a3:
a0:67:10:8b:62:3e:e8:1e:28:cb:c0:b3:bd:ec:e4:
79:51:b8:36:00:8c:e0:bb:1d:44:60:0d:83:ab:dd:
85:25:ac:15:2b:8b:e2:8d:15:ed:7d:56:c6:ba:71:
9f:27:d6:31:66:de:62:ec:da:7d:d2:3e:97:f6:e9:
e0:54:e2:4e:c5:ec:94:b1:e9:b5:52:03:95:c9:b8:
1b:0d:4c:4a:48:06:1a:b1:0b:0a:e2:1f:42:ee:5b:
d6:63:2f:bf:44:bd:89:e9:bb:4b:ab:28:8c:04:b0:
97:5e:00:1c:68:2d:79:61:88:41:b7:6a:50:e7:79:
3d:a3:a6:67:0a:97:3f:69:81:4c:b4:b8:89:fb:6e:
db:8e:33:75:9e:c9:93:89:92:f3:1f:c4:45:f0:52:
c0:76:f2:da:92:43:27:72:1e:ca:b5:81:db:c1:61:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:D8:EA:EA:9F:09:09:15:C9:87:7D:33:C5:8B:C1:09:07:91:19
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/335C17302CD711ECA528B744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.16.0/22
103.139.4.0/23
103.179.2.0/23
IPv6:
2001:df2:8e40::/48
Signature Algorithm: sha256WithRSAEncryption
64:e8:b7:9c:c8:d1:c9:3d:37:9a:fa:d4:76:6d:43:0a:21:1a:
bf:3a:14:68:a1:ac:41:8f:0c:68:6e:7f:98:df:35:0a:a6:46:
d6:7c:38:3c:1c:fe:ed:5b:8d:f1:98:1e:8a:a5:10:ae:f8:5e:
fd:1f:bb:c8:f0:bc:a8:f7:15:84:9d:70:cd:87:5a:9a:0e:c7:
cb:24:db:09:1e:3b:49:f3:39:bb:0f:ad:1a:85:45:e4:cf:06:
41:82:55:27:09:ef:1f:9e:99:e3:ee:1f:a4:fe:bd:e0:46:6a:
6e:6c:c2:a2:d1:63:3c:04:2a:10:3b:a9:28:4f:2a:7e:cd:fc:
05:fa:a7:2f:24:c1:7c:98:10:14:b5:56:04:0f:74:10:45:c5:
5c:8a:5c:21:64:3c:0d:9f:f8:54:4f:2b:9c:dd:d6:da:31:81:
64:cf:ed:ec:e0:4b:1f:b6:f1:4e:c9:df:ef:d3:aa:d0:93:18:
32:f2:8d:3c:6c:37:a4:c3:7b:d6:63:7c:c3:15:46:2d:a8:98:
34:09:0e:e5:51:e6:00:ce:78:5f:16:a4:0c:ce:7a:f5:13:d0:
0a:cd:74:54:99:fd:ab:89:e0:22:d6:67:34:09:ff:20:ab:0f:
4c:f8:ce:5e:6b:cb:61:65:13:90:e2:0c:0e:e1:1e:1a:09:61:
93:c2:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:08 2025 by rpki-client