Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
File: 518165E2081B11ED8C0F9244C4F9AE02.roa (raw, json)
Hash identifier: +9bgfNQpZ62CZzQ6UN1cKANqETpCiYo1TX0bBXc27l4=
Subject key identifier: F4:3C:8E:91:18:92:A4:E0:79:F4:EF:9B:BC:E9:61:31:55:CC:2D:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8CEA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
Signing time: Thu 30 May 2024 16:13:23 +0000
ROA not before: Thu 30 May 2024 16:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140192
IP address blocks: 103.156.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36074 (0x8cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a5a2-cead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:70:13:92:96:6d:5d:5b:f3:88:a6:29:ad:
f7:61:48:c4:ad:5a:53:d2:41:cb:cf:41:c9:23:f6:
c5:05:1b:78:59:61:d8:a0:a0:ed:ff:7f:cb:14:01:
d0:1a:d0:b7:0c:2c:5b:f4:a0:3d:cc:f4:7e:1f:5d:
50:c2:17:32:ac:b2:44:ae:0a:98:ee:fe:53:1b:0c:
85:ba:ef:17:31:1a:e4:d6:e1:43:5e:62:66:ec:c8:
c0:e1:6a:a2:05:a5:1b:af:bd:d7:57:b7:b8:59:32:
e0:7f:97:1c:a6:c3:07:19:ec:da:27:8b:30:28:66:
8a:2f:74:31:46:49:c9:39:cd:15:89:63:ee:90:31:
58:4f:fa:2b:c6:85:ce:4d:79:64:a3:76:62:c2:9b:
8b:e0:7b:88:35:13:b9:16:d1:fc:94:5c:f4:5d:73:
4f:f3:44:5d:7e:51:98:13:6b:8e:ea:55:a3:5a:1b:
4f:dc:84:c6:e0:be:85:cb:78:62:86:e2:9f:d9:41:
31:b4:c3:87:c6:a9:a1:bf:bf:60:63:ff:29:0c:ba:
a5:f5:4a:69:8b:75:ae:58:3e:c4:d1:90:d2:b9:01:
b3:c1:9f:e9:d1:9b:79:52:56:86:21:be:02:5c:3a:
cb:a2:29:37:52:58:2e:a1:bf:94:e1:1b:6b:7a:9f:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:8E:91:18:92:A4:E0:79:F4:EF:9B:BC:E9:61:31:55:CC:2D:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.188.0/24
Signature Algorithm: sha256WithRSAEncryption
07:81:b2:dd:7a:79:2f:e5:d0:5c:2d:b2:70:29:6b:fd:5e:1d:
b3:01:5f:4f:c1:20:d1:6f:a4:6d:73:9a:0c:33:30:ed:32:9f:
a0:7b:b2:a9:02:73:9d:79:93:d3:81:6a:f7:e1:4c:38:2b:b8:
47:61:83:84:bf:be:3c:69:43:2a:02:ca:25:7c:73:a4:de:02:
82:9c:4b:6c:9b:fd:14:bb:ca:19:61:67:29:91:95:20:77:32:
86:63:78:29:75:a2:5a:38:a5:e0:44:c5:45:50:2f:cd:05:94:
86:02:6b:0f:0e:a6:a6:ef:e8:37:ce:84:9d:c9:58:30:ce:02:
db:e3:9e:32:56:f6:12:d9:30:ff:44:bb:c9:68:1b:cd:b3:3d:
83:b7:e6:c4:c6:22:12:af:9c:bf:51:b1:42:02:20:bc:04:84:
47:81:c5:82:1f:ee:0a:3b:f2:f8:b8:37:ba:b1:ad:ca:53:58:
81:8e:20:86:36:95:77:33:03:03:e2:36:c4:44:91:20:d3:5f:
ee:1c:18:31:a7:b6:05:28:11:92:ca:74:78:5b:8c:73:30:25:
33:1d:50:f4:96:0a:10:e8:07:2e:ee:a0:61:69:06:44:d7:34:
3d:73:e5:07:c2:38:97:d5:e6:33:ef:2b:84:fe:c7:52:3e:74:
9e:7d:ba:d9
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIzqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MTMyM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE1YTItY2VhZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKlDcBOSlm1dW/OIpimt92FIxK1aU9JBy89BySP2xQUbeFlh2KCg7f9/yxQB
0BrQtwwsW/SgPcz0fh9dUMIXMqyyRK4KmO7+UxsMhbrvFzEa5NbhQ15iZuzIwOFq
ogWlG6+911e3uFky4H+XHKbDBxns2ieLMChmii90MUZJyTnNFYlj7pAxWE/6K8aF
zk15ZKN2YsKbi+B7iDUTuRbR/JRc9F1zT/NEXX5RmBNrjupVo1obT9yExuC+hct4
Yobin9lBMbTDh8apob+/YGP/KQy6pfVKaYt1rlg+xNGQ0rkBs8Gf6dGbeVJWhiG+
Alw6y6IpN1JYLqG/lOEba3qfFE0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBT0PI6R
GJKk4Hn075u86WExVcwtIzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUxODE2NUUy
MDgxQjExRUQ4QzBGOTI0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ5y8MA0GCSqGSIb3DQEBCwUAA4IBAQAHgbLdenkv5dBc
LbJwKWv9Xh2zAV9PwSDRb6Rtc5oMMzDtMp+ge7KpAnOdeZPTgWr34Uw4K7hHYYOE
v748aUMqAsolfHOk3gKCnEtsm/0Uu8oZYWcpkZUgdzKGY3gpdaJaOKXgRMVFUC/N
BZSGAmsPDqam7+g3zoSdyVgwzgLb454yVvYS2TD/RLvJaBvNsz2Dt+bExiISr5y/
UbFCAiC8BIRHgcWCH+4KO/L4uDe6sa3KU1iBjiCGNpV3MwMD4jbERJEg01/uHBgx
p7YFKBGSynR4W4xzMCUzHVD0lgoQ6Acu7qBhaQZE1zQ9c+UHwjiX1eYz7yuE/sdS
PnSefbrZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:13 2025 by rpki-client