Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
File: 4AE07D166EED11EDB6685622C4F9AE02.roa (raw, json)
Hash identifier: bcYIGh3sawIQYGd/Eu3ekroYx/jEp0+W2r6iXNQnSOI=
Subject key identifier: BD:E3:F2:F6:EE:4F:1D:65:71:6B:73:29:8F:73:C4:D4:97:43:42:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 890D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:14 +0000
ROA not before: Thu 30 May 2024 15:57:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133670
IP address blocks: 103.100.245.0/24 maxlen: 24
2001:df1:9640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35085 (0x890d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:57:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1d9-42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:70:3b:52:94:cc:c2:55:7c:6b:5d:68:af:
de:27:cc:8c:2f:ad:a0:4c:80:89:45:7a:83:82:85:
d4:82:49:ea:4a:01:dc:17:27:fe:21:68:74:fe:8b:
45:b9:78:1e:aa:46:43:ed:58:b4:1e:c7:d5:86:06:
3b:9a:67:be:ab:c6:08:be:a7:42:98:d1:aa:d0:ec:
b5:55:bb:eb:1b:b3:3a:79:4b:f2:70:c6:18:da:9a:
0a:24:e3:6d:ba:f5:1a:82:8a:86:fe:63:66:42:ff:
ac:9f:6d:74:0b:15:92:03:7a:cf:86:15:3d:b1:5e:
90:46:1a:ee:55:8a:47:5b:c9:7e:a7:44:d5:dc:a7:
62:70:54:df:ed:c0:c5:1b:00:0a:64:f2:4a:0f:6f:
79:2f:66:7d:3e:0b:44:20:21:76:eb:5a:2d:d3:4f:
aa:d4:92:44:be:93:06:79:e1:e8:f0:3b:7a:74:a8:
bc:26:56:1c:e4:66:c3:4a:eb:a8:c9:33:58:af:a9:
8c:a0:6c:94:71:3d:eb:9d:64:19:df:a4:c2:4b:81:
d9:37:63:1b:19:14:c8:47:cd:f1:ab:a9:0c:b0:78:
31:cc:88:f9:1e:61:ac:e8:b1:c4:ee:18:01:55:eb:
39:05:2d:e2:db:fd:26:8f:5c:4d:5f:58:e6:5c:28:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:F2:F6:EE:4F:1D:65:71:6B:73:29:8F:73:C4:D4:97:43:42:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.245.0/24
IPv6:
2001:df1:9640::/48
Signature Algorithm: sha256WithRSAEncryption
40:ae:ae:b9:80:bf:64:9c:af:d8:80:d5:3a:6d:b4:b3:28:1e:
e1:9e:a4:b0:15:b1:3c:70:ed:dd:42:31:33:c4:24:a2:ab:ee:
9f:4c:3f:e7:21:fc:2f:bb:2d:28:ba:73:7a:35:c2:f5:70:0d:
ec:7c:09:b7:39:45:cf:68:1f:c5:00:f1:cf:d4:cc:a5:ea:f5:
fd:39:b6:e7:23:fb:af:9e:02:1c:f4:73:a3:66:5f:c3:fd:9f:
ef:e0:af:4d:6e:ac:66:07:bb:97:69:83:e5:51:f6:96:8c:72:
e3:80:85:53:e1:65:e6:5f:7a:b1:a0:4b:0e:5e:be:cf:1d:12:
fc:de:14:a1:3d:87:ae:a9:d1:fe:88:e5:77:9f:2a:63:ff:85:
f8:14:80:ca:66:13:93:76:af:3e:1b:1d:86:6f:bf:48:4e:93:
dd:be:ff:02:df:f8:58:7d:51:4a:92:a9:67:1e:8a:85:56:74:
1f:67:80:dc:1f:9b:1c:16:34:eb:e3:da:05:a7:bf:a7:43:2f:
ed:32:6c:c5:c1:04:d3:a2:97:19:73:a6:c6:93:81:57:21:cb:
98:d8:29:ba:a3:70:95:aa:fd:7f:69:0a:d0:68:15:a1:b3:c1:
85:12:1f:e6:32:a7:32:d4:b6:97:39:45:12:62:a6:0b:aa:a6:
06:ce:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:08 2025 by rpki-client