Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59C2BC862DDC11EFA08CCB1DC4F9AE02.roa
File: 59C2BC862DDC11EFA08CCB1DC4F9AE02.roa (raw, json)
Hash identifier: VA+O+URoXq2wz3e84gwH0UdWhFv486oNFV9wMJxU4UY=
Subject key identifier: 28:9C:D1:E3:95:DF:A3:B6:3E:72:07:EB:FB:F5:1A:1B:8F:07:1F:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 99B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59C2BC862DDC11EFA08CCB1DC4F9AE02.roa
Signing time: Fri 20 Sep 2024 08:45:46 +0000
ROA not before: Fri 20 Sep 2024 08:45:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146943
IP address blocks: 43.239.110.0/24 maxlen: 24
103.30.74.0/24 maxlen: 24
103.30.75.0/24 maxlen: 24
103.156.21.0/24 maxlen: 24
103.171.50.0/23 maxlen: 24
103.172.84.0/23 maxlen: 24
103.172.150.0/24 maxlen: 24
103.172.151.0/24 maxlen: 24
103.193.74.0/24 maxlen: 24
103.193.75.0/24 maxlen: 24
103.233.24.0/23 maxlen: 24
103.242.119.0/24 maxlen: 24
103.251.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39352 (0x99b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 20 08:45:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ed3639-586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:ff:59:87:06:a0:41:ac:0f:85:83:d9:8e:
db:c9:72:c9:9c:9e:b0:46:4b:38:4c:8a:e9:f7:be:
4a:3f:51:e8:8b:f9:97:af:3a:1c:f4:13:1f:5e:9e:
f1:c8:7f:d6:03:a3:4e:aa:2a:60:30:18:93:98:b7:
75:e8:1d:6c:76:32:9d:77:24:97:d3:ed:53:00:1c:
0c:33:92:d0:f4:aa:72:22:2b:6c:8f:7b:35:14:fc:
f7:eb:48:9e:fe:ae:78:84:45:11:1e:67:33:72:ef:
62:8f:91:54:bf:89:02:97:f6:5b:75:89:89:4f:e1:
39:c6:9a:47:d6:f5:d9:b8:5b:c9:e2:64:8c:2d:49:
4b:e4:e0:e9:4f:72:44:fb:3f:b8:c1:a7:d9:8f:39:
7a:75:37:47:e2:96:c4:6e:55:f7:b1:a0:ba:1b:a5:
a1:7d:84:be:da:35:99:fc:a2:2e:66:af:a8:76:bd:
00:ed:97:16:64:13:c0:71:fa:d9:32:47:41:be:2d:
14:34:6c:be:a0:9d:1b:3a:33:85:7a:aa:04:07:d7:
27:a6:ee:a3:5e:25:bb:b1:b9:15:74:0d:dd:09:ba:
fe:cc:93:29:fe:91:a7:c5:4a:22:1d:4d:a3:66:58:
96:92:fb:78:a3:20:08:20:1f:8e:41:6f:38:4c:c4:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:D1:E3:95:DF:A3:B6:3E:72:07:EB:FB:F5:1A:1B:8F:07:1F:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59C2BC862DDC11EFA08CCB1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.110.0/24
103.30.74.0/23
103.156.21.0/24
103.171.50.0/23
103.172.84.0/23
103.172.150.0/23
103.193.74.0/23
103.233.24.0/23
103.242.119.0/24
103.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
78:90:69:97:5e:ae:8b:46:b4:a8:1e:ac:09:17:82:76:40:95:
72:c9:ea:20:0e:b2:7e:71:19:71:da:aa:8f:74:15:1f:cc:af:
3f:dc:1a:04:d6:5b:49:13:d2:6c:38:5d:a9:46:31:a5:27:55:
69:5b:32:f0:93:a8:e9:04:66:8d:96:94:a4:b5:ce:1e:3e:b9:
67:9c:e0:b3:de:83:c9:78:e6:47:61:57:9c:73:7e:70:1c:cb:
ae:a3:8e:c1:24:9c:f5:6e:f2:cb:ff:7d:b3:93:50:e4:45:e0:
90:c1:f3:9a:ef:1b:04:bc:bd:89:be:aa:c8:88:77:9d:bc:2b:
43:9b:02:f1:69:78:17:38:c1:65:fc:82:0e:c5:c4:ec:8c:82:
7c:15:b2:9e:a1:e9:e9:d7:c9:e6:a3:d4:7f:b8:3e:8e:48:ff:
26:fc:2e:23:33:ac:1a:9c:b5:68:df:71:24:5f:8d:b3:f5:df:
7e:2b:c1:17:cd:49:01:c8:15:45:f7:8c:cb:35:b5:7a:6d:80:
a4:17:de:3c:e6:ba:15:7c:69:e8:59:f5:e8:6a:92:ef:cf:18:
ef:57:d8:70:78:e5:71:da:e3:4a:b4:89:17:92:d4:3e:58:7b:
b7:0e:8d:64:a9:f3:8c:02:77:40:6f:2b:b1:34:2b:48:07:d7:
2b:18:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:37 2025 by rpki-client