Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
File: 5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: q0IWSA5+pfM43QaZYLanMJMO4rEWeVVBAQukL0yngHQ=
Subject key identifier: 6E:3B:42:03:A0:84:49:3E:9E:87:FF:FD:B6:5C:74:08:BA:37:8D:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:27 +0000
ROA not before: Thu 30 May 2024 16:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138740
IP address blocks: 103.140.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35899 (0x8c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4f3-92f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:46:3f:2c:b4:46:ef:05:18:46:ab:58:f0:
fb:c5:8c:c8:c7:06:08:aa:54:96:63:8b:b2:cf:f7:
2d:6c:5b:4a:81:e6:de:0c:bb:92:c8:31:3d:46:41:
19:44:bd:e7:77:3a:43:bb:af:d8:52:ae:df:f7:de:
e9:ac:10:f5:14:78:7e:90:a1:a4:45:02:0f:48:0a:
8e:dd:11:99:92:4e:18:a6:63:37:dc:f1:89:0d:4c:
ef:1f:64:3c:8b:70:90:0c:05:1d:0f:15:70:6a:b3:
1e:19:91:d8:13:97:a2:d1:8c:f8:f7:c7:e3:ba:a4:
cc:55:70:c7:16:fc:fc:a5:fc:83:2b:c3:f7:02:71:
05:1d:bb:5d:6f:38:b1:7b:ad:62:95:65:4e:92:e3:
eb:0f:09:92:8b:44:10:fa:37:89:68:af:46:6f:5a:
e1:2f:56:34:27:4b:d7:93:f5:6d:c3:b5:f4:0e:6c:
92:d3:97:9f:fc:b3:69:23:a2:ea:b0:8c:db:6a:d0:
78:48:22:78:a4:1e:d4:c2:8b:8e:68:18:be:26:f2:
47:ed:b0:6e:ea:a9:88:4e:a8:d7:02:2e:3c:f1:d9:
51:5d:82:3a:ae:3f:eb:93:3d:93:e9:a2:14:81:6a:
5d:80:2c:a0:32:33:2b:65:12:85:53:c5:71:2c:6d:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:42:03:A0:84:49:3E:9E:87:FF:FD:B6:5C:74:08:BA:37:8D:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CA2E9E8BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.72.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ff:0b:f3:65:c0:8d:e7:b9:8d:15:96:30:36:ba:7c:2e:4c:
66:78:e8:da:6d:8f:a0:b4:e3:c1:ef:c1:72:f0:2c:06:87:f4:
aa:f6:9b:a0:4d:8a:6b:84:b7:da:63:c0:d5:43:b1:16:7f:d3:
3a:14:04:f3:a2:07:99:9b:81:da:2a:79:ec:79:8b:44:49:b2:
93:39:8f:2b:91:bc:bb:36:b0:b6:75:46:07:9f:a7:a1:1d:86:
0c:af:fe:47:77:6c:dd:41:e7:d2:b4:01:3d:df:f8:17:a9:57:
e2:71:15:34:a2:75:40:65:0f:15:4a:90:63:ad:ad:48:70:d6:
f0:67:f9:46:32:cc:c2:d3:79:d9:09:f9:d6:1a:b3:cd:36:16:
6a:48:82:66:d1:aa:6b:c4:dd:55:70:c8:37:39:06:80:72:ae:
ab:e4:05:43:d3:76:3a:f3:2a:eb:cc:5e:8e:f2:25:5a:b8:ef:
a7:84:43:28:50:af:f8:f6:75:48:29:6e:c5:3d:08:61:50:3e:
62:23:de:73:40:86:aa:cd:0d:d3:18:9c:26:89:97:02:8c:32:
cc:c9:17:b1:69:57:bd:a6:92:e0:b4:8a:e4:ac:33:8b:4f:de:
03:84:d4:ee:47:8a:de:6f:28:10:bf:30:d9:9e:6e:03:87:7f:
58:ae:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:31 2025 by rpki-client