Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
File: 37F380B027F811EBB6ADAF84C4F9AE02.roa (raw, json)
Hash identifier: MxKPl5US1NbM1NBQTqdT5ZFYOy0n8z0KWhebWqr5VGo=
Subject key identifier: EB:64:4E:F9:A7:FD:7B:EE:0E:45:E1:29:9A:E5:CF:24:67:34:2D:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A69
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:53 +0000
ROA not before: Thu 30 May 2024 16:02:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135734
IP address blocks: 103.144.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35433 (0x8a69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:02:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a32c-7c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:c0:b1:25:db:49:59:33:8e:7e:36:17:aa:
a6:3e:d1:2a:7f:70:fe:e8:1c:7b:65:38:b1:8b:89:
cb:bc:53:ff:3d:b5:ab:36:7c:a8:51:5b:b4:33:25:
e8:9b:b9:8c:6a:56:20:8b:91:77:5b:70:5c:fc:16:
04:1b:60:35:48:1b:5d:08:7f:6b:f4:87:fb:81:f6:
ba:c4:04:e8:b8:7b:49:a9:f3:3f:99:e3:d0:ea:e8:
58:88:5a:72:38:2c:5a:c1:1d:1e:71:93:13:6b:b6:
2a:b6:25:56:1f:5c:a7:4f:b8:8d:1d:f0:a6:c4:15:
a7:74:fd:41:0c:0f:41:9d:21:f1:8e:b1:be:77:72:
75:1c:2b:b3:f7:96:6d:93:2f:33:90:95:c6:e3:64:
3b:7c:3e:b7:1d:bf:20:ed:bc:0a:20:da:c0:63:4a:
c6:dd:0d:3f:51:f4:c7:ec:6f:3e:50:6c:c6:6a:ce:
7a:2e:63:97:72:93:89:b7:c3:bb:17:9a:6b:e5:68:
5a:c6:9b:c8:71:a0:35:0c:92:53:da:b4:e0:05:6c:
e0:81:af:34:a1:aa:ae:22:f7:00:2a:66:f4:d2:b0:
fa:6f:4f:6a:5d:b4:26:75:36:4c:74:a0:48:e0:09:
77:d2:31:f0:2c:fd:40:e0:28:63:2e:6d:0c:a9:b0:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:4E:F9:A7:FD:7B:EE:0E:45:E1:29:9A:E5:CF:24:67:34:2D:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.92.0/23
Signature Algorithm: sha256WithRSAEncryption
45:32:10:a3:dc:cd:c1:82:a7:5b:4b:4a:07:5e:72:83:63:60:
e2:33:20:bd:58:29:77:2e:dd:da:30:1e:20:bc:30:1c:4f:cc:
08:a2:21:2d:0d:86:ac:b8:35:a0:89:c0:ee:0f:e5:05:ac:e1:
a0:86:c3:79:66:00:68:a2:62:bc:45:e2:cb:03:9d:c4:7e:3c:
72:3d:bc:c1:24:a1:7a:de:da:c8:34:75:4e:5d:b8:38:d3:ea:
91:a2:98:3d:61:c0:89:b2:cb:18:91:48:c1:6f:db:bf:66:6e:
b3:18:46:aa:2d:12:e4:88:28:08:4e:80:a6:2c:46:be:45:11:
83:7e:9d:07:0d:dc:46:df:a2:e9:5e:47:4a:4f:9d:aa:81:c4:
46:7a:5a:cf:b2:10:b3:12:3c:a1:a5:fa:6d:29:7c:03:8e:72:
5e:c2:1f:3c:27:6c:98:a5:4b:f0:6e:04:57:99:b8:cc:41:7d:
f7:bd:86:88:65:d6:fd:85:6b:d9:34:cf:80:4f:7c:38:2f:80:
7d:c7:64:1c:93:37:69:0f:b1:9f:66:b1:8c:a1:21:8c:4f:a5:
41:98:d6:c5:dd:f7:da:11:dd:39:8f:cf:29:41:6c:88:55:d6:
00:21:79:7c:12:cf:ab:81:f2:38:ca:08:6c:bc:47:44:4a:fd:
e1:81:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:53 2025 by rpki-client