Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D76812CBDCF11EA8755D90DC4F9AE02.roa
File: 5D76812CBDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: YH8NH0unfN+mzT2LrJ/IY7lq/jZ66KEcg5ocwDyt8ic=
Subject key identifier: B0:3B:93:BC:FE:0A:77:62:49:A7:55:7C:7E:48:84:0E:A5:C0:51:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C3C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D76812CBDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:28 +0000
ROA not before: Thu 30 May 2024 16:10:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138741
IP address blocks: 103.139.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35900 (0x8c3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:10:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4f4-93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:65:54:35:37:59:49:6e:f3:9b:68:e9:d5:
c4:bf:4f:64:7d:ba:5c:ac:b4:8b:f3:5b:97:99:f5:
a3:38:73:76:78:05:a7:c9:3b:52:ec:a6:c7:90:c5:
bf:28:fb:be:86:4f:ea:d6:37:01:db:0b:0c:b9:6c:
c2:68:af:a9:d5:92:04:f7:b4:2e:e9:f8:a0:33:84:
b2:64:71:c5:a1:cf:21:77:af:6c:9e:9c:72:0e:c4:
96:bf:23:68:45:0d:94:9c:2d:52:c6:35:73:b1:5e:
8c:56:1e:8e:79:6a:d9:12:95:8a:7f:0a:cf:89:da:
3c:11:84:94:92:b5:b3:dd:18:29:a3:7f:69:c9:a1:
16:63:14:dd:53:a0:ff:7b:ff:91:0e:7b:13:c3:9d:
c1:c5:5b:0a:3d:56:4d:28:a6:85:53:67:ca:bb:f0:
88:31:3f:3a:13:19:47:ce:10:40:a3:82:f4:72:b2:
fb:d9:e2:2d:3c:0b:e0:61:f4:44:23:fe:5d:84:f9:
52:d6:04:c2:52:b3:fb:16:e5:c4:7f:00:0d:1a:b9:
14:ee:e1:ca:15:6a:7c:8b:c7:e8:76:7d:c1:9d:d8:
68:9f:7f:95:ed:78:3a:65:30:9e:fa:2f:b9:ab:26:
b5:f3:cd:ab:3e:b0:74:21:99:50:97:71:11:0a:a5:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:93:BC:FE:0A:77:62:49:A7:55:7C:7E:48:84:0E:A5:C0:51:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D76812CBDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.220.0/23
Signature Algorithm: sha256WithRSAEncryption
67:89:25:66:cc:48:c1:4f:a8:36:dc:f0:0f:14:6f:90:aa:51:
25:aa:29:fa:55:37:0f:21:59:30:84:0d:3d:fc:49:7e:b9:23:
4b:a2:5f:4c:fc:a4:1e:3e:46:e8:1b:1f:ca:af:5e:af:b0:e3:
8c:26:0c:0f:0b:d1:1b:1f:f7:6e:74:49:25:b5:d4:57:53:10:
d8:71:cc:4c:9e:bd:16:30:b8:92:9b:d9:ba:36:96:48:f4:e7:
54:22:77:61:ec:51:4e:9f:ee:0c:b1:a0:7d:1a:51:45:e0:e3:
b7:3b:12:a3:b8:77:7a:02:49:c2:75:5c:71:ef:c3:5a:2d:19:
3f:82:bc:a6:1d:9d:ec:ff:4f:fc:79:f6:21:10:0e:6c:7b:2e:
7d:13:64:7a:b5:d1:c5:39:51:a0:5a:8c:46:d7:44:c6:1e:8a:
46:f5:93:59:4a:08:81:96:26:d3:db:bb:16:12:f9:b6:22:2a:
bc:31:1f:a8:cf:d8:91:32:52:2c:46:af:69:93:00:7c:94:7b:
a0:fb:c4:1d:c5:50:30:e3:1a:0c:6b:d2:71:57:8a:0d:56:14:
cc:95:14:39:fa:91:38:f6:45:e3:51:d5:4a:c5:fd:4d:b5:9c:
1d:a7:ac:ff:07:fa:67:45:ab:88:a3:9a:86:f8:ca:0b:d4:b1:
5c:3f:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:48 2025 by rpki-client